All CVEs — page 384 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
BackupEase versions 2.2.2 and earlier have an unauthenticated sensitive data exposure vulnerability where attackers can access backup configuration files and credentials without any authentication. This allows unauthorized users to extract sensitive backup data and potentially gain access to underlying systems.
The StifLi Backup Tools application suffers from unauthenticated sensitive data exposure, allowing attackers to access backup files and related metadata without any authentication. This vulnerability is particularly concerning because it can lead to unauthorized access to potentially sensitive backup data.
A WordPress plugin with unauthenticated broken access control allows attackers to bypass authentication and access backup files without any credentials. This vulnerability affects versions up to 1.6.0 and can lead to sensitive data exposure.
The flaw is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in the Blacklist Manager for WooCommerce Anti-Fraud versions 2.3.1 and earlier, allowing attackers to perform unauthorized actions on behalf of users.
A remote code execution vulnerability exists in CartFlows versions up to 3.2.0, allowing attackers to execute arbitrary code on the server.
The flaw allows for PHP object injection, enabling attackers to execute arbitrary code. This matters because it can lead to full compromise of the application and underlying system.