Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2023-2288 | Otter Plugin up to 2.2.5 on WordPress Phar deserialization


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as problematic, has been found in Otter Plugin up to 2.2.5 on WordPress. Affected by this issue is some unknown functionality of the component Phar Handler. The manipulation leads to deserialization. This vulnerability is handled as CVE-2023-2288. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ PHP bis 5.6.29/7.0.14 Phar Archive ext/phar/phar.c phar_parse_pharfile Archive File Denial of Service


📈 54.64 Punkte
🕵️ Sicherheitslücken

🕵️ PHP up to 5.6.29/7.0.14 Phar Archive ext/phar/phar.c phar_parse_pharfile Archive File denial of service


📈 54.64 Punkte
🕵️ Sicherheitslücken

🕵️ PHP up to 5.6.38/7.0.32/7.1.24/7.2.12 PHAR ext/phar/phar.c phar_parse_pharfile memory corruption


📈 54.64 Punkte
🕵️ Sicherheitslücken

🕵️ PHP up to 5.6.39/7.1.25/7.2.13/7.3.0 phar ext/phar/phar.c phar_detect_phar_fname_ext memory corruption


📈 54.64 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2440 | Theme Editor Plugin up to 2.8 on WordPress Phar Deserialization deserialization


📈 45.85 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-8141 | Magento up to 2.1.18/2.2.9/2.3.2 Phar Deserialization deserialization


📈 37.8 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-34515 | spatie image-optimizer up to 1.7.2 Phar Deserialization file_exists deserialization (Issue 210)


📈 37.8 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-5590 | PHP up to 5.4.42/5.5.26/5.6.10 ext/phar/phar.c phar_fix_filepath memory corruption (ID 69923 / BID-75970)


📈 37.25 Punkte
🕵️ Sicherheitslücken

🕵️ PHPMailer up to 6.4.0 Phar Deserialization addAttachment deserialization


📈 36.97 Punkte
🕵️ Sicherheitslücken

🕵️ Artica Pandora FMS 742 Phar Deserialization deserialization


📈 36.97 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3536 | Role Based Pricing for WooCommerce Plugin up to 1.6.2 on WordPress Phar deserialization


📈 36.47 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-3054 | WPvivid Backup & Migration Plugin up to 0.9.99 on WordPress PHAR deserialization


📈 36.47 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2439 | Easy Digital Downloads Plugin up to 3.3.3 on WordPress Phar deserialization


📈 36.47 Punkte
🕵️ Sicherheitslücken

🕵️ PHP bis 5.4.42/5.5.26/5.6.10 ext/phar/phar.c phar_fix_filepath Pufferüberlauf


📈 36.42 Punkte
🕵️ Sicherheitslücken

🕵️ PHP bis 5.4.42/5.5.26/5.6.10 TAR Archive Handler ext/phar/phar_object.c Phar::convertToData Denial of Service


📈 36.42 Punkte
🕵️ Sicherheitslücken

🕵️ PHP bis 5.6.29/7.0.14 ext/phar/phar.c phar_parse_pharfile Pufferüberlauf


📈 36.42 Punkte
🕵️ Sicherheitslücken

🕵️ PHP bis 5.4.42/5.5.26/5.6.10 ext/phar/phar.c phar_fix_filepath Pufferüberlauf


📈 36.42 Punkte
🕵️ Sicherheitslücken

🕵️ PHP bis 5.4.42/5.5.26/5.6.10 TAR Archive Handler ext/phar/phar_object.c Phar::convertToData Denial of Service


📈 36.42 Punkte
🕵️ Sicherheitslücken

🕵️ PHP bis 5.6.29/7.0.14 ext/phar/phar.c phar_parse_pharfile Pufferüberlauf


📈 36.42 Punkte
🕵️ Sicherheitslücken

🕵️ PHP up to 5.4.42/5.5.26/5.6.10 TAR Archive ext/phar/phar_object.c Phar::convertToData denial of service


📈 36.42 Punkte
🕵️ Sicherheitslücken

🕵️ PHP up to 5.6.29/7.0.14 ext/phar/phar.c phar_parse_pharfile memory corruption


📈 36.42 Punkte
🕵️ Sicherheitslücken

🕵️ PHP up to 5.6.29/7.0.14 ext/phar/phar.c phar_parse_pharfile Integer memory corruption


📈 36.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1691 | Otter Blocks Pro Plugin up to 2.6.3 on WordPress SVG Upload cross site scripting


📈 30.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1684 | Otter Blocks Pro Plugin up to 2.6.3 on WordPress File Field CSS cross site scripting


📈 30.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-2841 | Otter Blocks Plugin up to 2.6.5 on WordPress cross site scripting


📈 30.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-3343 | Otter Blocks Plugin up to 2.6.8 on WordPress Block Attribute cross site scripting (ID 3068495)


📈 30.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-3344 | Otter Blocks Plugin up to 2.6.8 on WordPress cross site scripting (ID 3068495)


📈 30.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-3725 | Otter Blocks Plugin up to 2.6.9 on WordPress titleTag cross site scripting (ID 3071504)


📈 30.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-35682 | Themeisle Otter Blocks PRO Plugin up to 2.6.11 on WordPress information disclosure


📈 30.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-10367 | Otter Blocks Plugin up to 3.0.4 on WordPress SVG File Upload cross site scripting


📈 30.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-11219 | Otter Blocks Plugin up to 3.0.6 on WordPress Image View path traversal


📈 30.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-16317 | Pimcore up to 5.7.0 PHAR File filename deserialization


📈 28.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1198 | openBI up to 6.0.3 Phar User.php addxinzhi outimgurl deserialization


📈 28.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-8801 | SuiteCRM up to 7.11.11 Phar Deserialization injection (ID 156324)


📈 28.42 Punkte
🕵️ Sicherheitslücken

🕵️ Smush Image Compression and Optimization <= 2.9.1 - Authenticated Phar Deserialization


📈 27.59 Punkte
🕵️ Sicherheitslücken

matomo
•