Page 386 of 10620 results (0.026 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-41735 – WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure

https://notcve.org/view.php?id=CVE-2023-41735

The Email posts to subscribers for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the elp_plugin_parse_request() function in versions up to, and including 6.2. • https://patchstack.com/database/vulnerability/email-posts-to-subscribers/wordpress-email-posts-to-subscribers-plugin-6-2-sensitive-data-exposure? • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-862: Missing Authorization •

CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2023-32338 – IBM Sterling Secure Proxy information disclosure

https://notcve.org/view.php?id=CVE-2023-32338

IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585. IBM Sterling Secure Proxy e IBM Sterling External Authentication Server v6.0.3 y v6.1.0 almacenan credenciales de usuario en texto claro que puede leer un usuario local con acceso al contenedor. IBM X-Force ID: 255585. • https://exchange.xforce.ibmcloud.com/vulnerabilities/255585 https://https://www.ibm.com/support/pages/node/7029765 https://www.ibm.com/support/pages/node/7029765 https://www.ibm.com/support/pages/node/7029766 • CWE-522: Insufficiently Protected Credentials •

CVSS: 4.4EPSS: 0%CPEs: 35EXPL: 0

CVE-2023-32817

https://notcve.org/view.php?id=CVE-2023-32817

This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/September-2023 • CWE-125: Out-of-bounds Read •

CVSS: 4.4EPSS: 0%CPEs: 35EXPL: 0

CVE-2023-32816

https://notcve.org/view.php?id=CVE-2023-32816

This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/September-2023 • CWE-125: Out-of-bounds Read •

CVSS: 4.4EPSS: 0%CPEs: 41EXPL: 0

CVE-2023-32815

https://notcve.org/view.php?id=CVE-2023-32815

This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/September-2023 • CWE-125: Out-of-bounds Read •