4615 matches found
WordPress Booking & Appointment Plugin for WooCommerce Plugin <= 6.9.0 is vulnerable to Broken Access Control
Software Booking & Appointment Plugin for WooCommerce Type Plugin Vulnerable versions = 6.9.0 Fixed in 6.10.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2024-10729 Patch priority High CVSS severity High 8.8 Developer Claim ownership PS...
WordPress CM On Demand Search And Replace Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)
Software CM On Demand Search And Replace Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11202 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cf0ce3925274 Credits...
WordPress CM Tooltip Glossary Plugin <= 4.3.11 is vulnerable to Cross Site Scripting (XSS)
Software CM Tooltip Glossary Type Plugin Vulnerable versions = 4.3.11 Fixed in 4.3.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11202 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 43a316167b95 Credits Peter...
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.15 is vulnerable to Cross Site Scripting (XSS)
Software Booking calendar, Appointment Booking System Type Plugin Vulnerable versions = 3.2.15 Fixed in 3.2.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9504 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...
WordPress Support SVG Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Software Support SVG Type Plugin Vulnerable versions = 1.1.0 Fixed in 1.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11091 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7d70333b5396 Credits Francesco Carlucci Required...
2024 CWE Top 25 Most Dangerous Software Weaknesses
The Cybersecurity and Infrastructure Security Agency CISA, in collaboration with the Homeland Security Systems Engineering and Development Institute HSSEDI, operated by MITRE, has released the 2024 CWE Top 25 Most Dangerous Software Weaknesseslink is external. This annual list identifies the most...
CVE-2024-11304
creationtimestamp| type| source ---|---|--- 2024-11-18 17:23:20+00:00| seen| https://t.me/cvedetector/11351 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...
CVE-2024-52428
creationtimestamp| type| source ---|---|--- 2024-11-18 17:23:19+00:00| seen| https://t.me/cvedetector/11349 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51 2026-04-01 18:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihbhkakdi2r...
CVE-2023-39176
creationtimestamp| type| source ---|---|--- 2024-11-18 12:22:16+00:00| seen| https://t.me/cvedetector/11323 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...
CVE-2024-48896
A vulnerability was found in Moodle. It is possible for users with the "send message" capability to view other users' names that they may not otherwise have access to via an error message in Messaging. Note: The name returned follows the full name format configured on the site...
CVE-2024-41967
creationtimestamp| type| source ---|---|--- 2024-11-18 10:41:39+00:00| seen| https://t.me/cvedetector/11302 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...
CVE-2024-50195
creationtimestamp| type| source ---|---|--- 2024-11-08 07:59:48+00:00| seen| https://t.me/cvedetector/10173 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07 2026-02-06 13:45:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me6zzvruf...
CVE-2024-50199
creationtimestamp| type| source ---|---|--- 2024-11-08 07:59:42+00:00| seen| https://t.me/cvedetector/10169 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...
Luvion Grand Elite 3 Connect 安全漏洞
Luvion Grand Elite 3 Connect is a smart monitor from the Dutch company Luvion. A security vulnerability exists in Luvion Grand Elite 3 Connect version 2020-02-25 and earlier, which stems from the fact that a client can authenticate to the device using a username and password, and these credential...
CVE-2024-51381
creationtimestamp| type| source ---|---|--- 2024-11-05 21:25:41+00:00| seen| https://t.me/cvedetector/9939...
AZL-52248 CVE-2024-51744 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-25
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
CVE-2024-50074
creationtimestamp| type| source ---|---|--- 2024-10-29 03:03:07+00:00| seen| https://t.me/cvedetector/9232 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...
CVE-2024-50082
creationtimestamp| type| source ---|---|--- 2024-10-29 03:02:59+00:00| seen| https://t.me/cvedetector/9223 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...
CVE-2024-50083
creationtimestamp| type| source ---|---|--- 2024-10-29 03:02:54+00:00| seen| https://t.me/cvedetector/9221 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...