CVE - API Security Blog

CVE-2023-32021

Windows SMB Witness Service Security Feature Bypass VulnerabilityRead More ...

June 14, 2023

CVSS3 - HIGH

CVSS2 - MEDIUM

CVE-2023-3198

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_message function. This makes it possible for unauthent ...

June 14, 2023

CVE-2023-3203

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_limit_product function. This makes it possible for unauthenticated ...

June 14, 2023

CVE-2023-3200

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_message function. This makes it possible for unauthentica ...

June 14, 2023

CVE-2023-3201

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_title function. This makes it possible for unauthenticate ...

June 14, 2023

CVE-2023-24937

Windows CryptoAPI Denial of Service VulnerabilityRead More ...

June 14, 2023

CVSS3 - MEDIUM

CVSS2 - MEDIUM

CVE-2023-34250

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, an attacker could use the new topics d ...

June 14, 2023

CVE-2023-32301

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, multiple duplicate topics could be cre ...

June 14, 2023