246 matches found
CVE-2024-7851
CVE-2024-7851 affects SourceCodester Yoga Class Registration System 1.0, targeting the Add User Handler component. The vulnerability lies in the /classes/Users.php?f=save code path, where improper authorization can be exploited remotely to impact confidentiality, integrity, and availability. Publ...
CVE-2024-7851 SourceCodester Yoga Class Registration System Add User Users.php improper authorization
A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be...
CVE-2024-7851 SourceCodester Yoga Class Registration System Add User Users.php improper authorization
A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be...
Yoga Class Registration System 授权问题漏洞
Yoga Class Registration System is a yoga class registration system by the individual developer Carlo Montero. An authorization issue vulnerability exists in Yoga Class Registration System version 1.0, which stems from unknown code in the file /classes/Users.php?f=save of the component Add User...
Yoga Class Registration System 跨站脚本漏洞
Yoga Class Registration System is a yoga class registration system by Carlo Montero, a personal developer. A cross-site scripting vulnerability exists in version 1.0 of the Yoga Class Registration System, which stems from some unknown handling of the file /admin/inquiries/viewinquiry.php, where...
Yoga Class Registration System SQL注入漏洞
Yoga Class Registration System is a yoga class registration system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Yoga Class Registration System version 1.0, which originates from an unknown function in the file /admin/?page=categories/viewcategory, where...
CVE-2024-40975
In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Unregister devices in reverse order Not all subsystems support a device getting removed while there are still consumers of the device with a reference to the device. One example of this is the...
CVE-2024-40975
CVE-2024-40975 affects the Linux kernel in platform/x86/x86-android-tablets code. The issue arises when a device is unregistered while consumers still hold references, with the regulator subsystem given as a concrete example. If a regulator is unregistered prematurely, a WARN() can be triggered (...
CVE-2024-40975
In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Unregister devices in reverse order Not all subsystems support a device getting removed while there are still consumers of the device with a reference to the device. One example of this is the...
CVE-2024-40975 platform/x86: x86-android-tablets: Unregister devices in reverse order
In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Unregister devices in reverse order Not all subsystems support a device getting removed while there are still consumers of the device with a reference to the device. One example of this is the...
PT-2024-22536 · Openstack · Openstack Storlets
Name of the Vulnerable Software and Affected Versions: OpenStack Storlets yoga-eom affected versions not specified Description: An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component. Recommendations: At the moment, there is no...
CVE-2024-28716
CVE-2024-28716 affects OpenStack Storlets yoga-eom and enables remote code execution via gateway.py. The CVSS v3.1 base score is 7.5 (HIGH); attack vector NETWORK, complexity LOW, privileges NONE, no user interaction. Several connected sources (NVD, Red Hat, CVE catalogs, PT Security) confirm the...
GHSA-RFM2-F94J-QHJP OpenStack Storlets arbitrary code execution vulnerability
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-28717
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-32529
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Momoyoga Yoga Schedule Momoyoga allows Stored XSS.This issue affects Yoga Schedule Momoyoga: from n/a through 2.7.0...
CVE-2024-32529 WordPress Yoga Schedule Momoyoga plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Momoyoga Yoga Schedule Momoyoga allows Stored XSS.This issue affects Yoga Schedule Momoyoga: from n/a through 2.7.0...
CVE-2024-32529 WordPress Yoga Schedule Momoyoga plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Momoyoga Yoga Schedule Momoyoga allows Stored XSS.This issue affects Yoga Schedule Momoyoga: from n/a through 2.7.0...
CVE-2024-32529
CVE-2024-32529 is a Stored XSS vulnerability in the Yoga Schedule Momoyoga WordPress integration plugin (Yoga Schedule Momoyoga) affecting versions from n/a up to 2.7.0. The issue arises from improper neutralization of input during web page generation, enabling an attacker to inject script payloa...
WordPress Plugin Yoga Schedule Momoyoga 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
