Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

Red Hat Red Hat Enterprise Linux 10 Red Hat Red Hat Enterprise Linux 6 +5个

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

SUSE Rancher

Rancher CLI skips TLS verification on Rancher CLI login command

SUSE rancher suse rancher

NeuVector scanner insecurely handles passwords as command arguments

SUSE harvester

Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api

Red Hat Red Hat Enterprise Linux 10 Red Hat Red Hat Enterprise Linux 6 +5个

Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute

ays-pro Secure Copy Content Protection and Content Locking

Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter

metaphorcreations Post Duplicator

Disable Admin Notices – Hide Dashboard Notifications <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update

themeisle Disable Admin Notices – Hide Dashboard Notifications

WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

brechtvds WP Recipe Maker

SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting

SourceCodester Patients Waiting Area Queue Management System Patrick Mvuma Patients Waiting Area Queue Management System +1个

Advanced Woo Labels <= 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter

mihail-barinov Advanced Woo Labels – Product Labels & Badges for WooCommerce

Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter

cyberhobo Geo Mashup

WPGSI: Spreadsheet Integration <= 3.8.3 - Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token

javmah WPGSI: Spreadsheet Integration

Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload

dfactory Responsive Lightbox & Gallery

SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scripting

SourceCodester Patients Waiting Area Queue Management System Patrick Mvuma Patients Waiting Area Queue Management System +1个

Tenda F453 httpd SafeEmailFilter fromSafeEmailFilter buffer overflow

Tenda F453 tenda f453_firmware

Tenda F453 httpd NatStaticSetting fromNatStaticSetting buffer overflow

Tenda F453 tenda f453_firmware

Tenda F453 httpd webtypelibrary formWebTypeLibrary buffer overflow

Tenda F453 tenda f453_firmware

Rise Blocks – A Complete Gutenberg Page Builder <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Identity Block Attributes

eaglethemes Rise Blocks – A Complete Gutenberg Page Builder

Tenda F453 httpd RouteStatic fromRouteStatic buffer overflow

Tenda F453 tenda f453_firmware