31
|
5.3 |
MEDIUM
Network
|
-
|
-
|
IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose sensitive information about the system that could aid in further attacks against the syst…
New
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2023-38716
|
2025-01-25 23:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
32
|
5.3 |
MEDIUM
Network
|
-
|
-
|
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information about the system that co…
New
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2023-38714
|
2025-01-25 23:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
33
|
5.3 |
MEDIUM
Network
|
-
|
-
|
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information about the system that co…
New
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2023-38713
|
2025-01-25 23:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
34
|
4.3 |
MEDIUM
Network
|
-
|
-
|
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could allow an authenticated user to obtain sensitive informa…
New
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2023-38271
|
2025-01-25 23:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
35
|
5.3 |
MEDIUM
Network
|
-
|
-
|
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information in HTTP responses that c…
New
|
CWE-201
Insertion of Sensitive Information Into Sent Data
|
CVE-2023-38013
|
2025-01-25 23:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
36
|
5.3 |
MEDIUM
Network
|
-
|
-
|
IBM Cloud Pak System 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially…
New
|
CWE-22
Path Traversal
|
CVE-2023-38012
|
2025-01-25 23:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
37
|
7.5 |
HIGH
Network
|
-
|
-
|
The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.5 via the uploads dire…
New
|
CWE-200
Information Exposure
|
CVE-2024-13562
|
2025-01-25 21:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
38
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Divi Carousel Maker – Image, Logo, Testimonial, Post Carousel & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Carousel and Logo Carousel in all ver…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-0350
|
2025-01-25 19:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
39
|
3.8 |
LOW
Network
|
-
|
-
|
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all ve…
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-13450
|
2025-01-25 18:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
40
|
5.3 |
MEDIUM
Network
|
-
|
-
|
The Boom Fest plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'bf_admin_action' function in all versions up to, and including, 2.2.1. …
New
|
CWE-862
Missing Authorization
|
CVE-2024-13449
|
2025-01-25 18:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|