4402 matches found
CVE-2024-10814
Technical details about CVE-2024-10814 are not provided in the supplied documents. Monitor official advisories for updates on affected products, impact, and fixes.
WordPress plugin Blrt WP Embed SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2024-34748 · WordPress · Blrt Wp Embed
Name of the Vulnerable Software and Affected Versions: Blrt WP Embed versions 1.6.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper handling of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...
CVE-2024-10814: Server-Side Request Forgery (SSRF)
The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5 via the cegetfile function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originati...
WordPress plugin Code Embed 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
CVE-2024-51606: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Blrt Blrt WP Embed blrt-wp-embed allows SQL Injection.This issue affects Blrt WP Embed: from n/a through = 1.6.9...
WordPress Code Embed plugin <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery vulnerability
Authenticated Contributor+ Server-Side Request Forgery vulnerability discovered by Max Boll b0lli in WordPress Plugin Code Embed versions = 2.5...
WordPress Embed documents shortcode plugin <= 1.5 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Embed documents shortcode versions = 1.5...
PT-2024-16571 · WordPress · Code Embed
Name of the Vulnerable Software and Affected Versions: Code Embed plugin for WordPress versions up to 2.5 Description: The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery via the ce get file function. This makes it possible for authenticated attackers, with...
WordPress Code Embed Plugin <= 2.5 is vulnerable to Server Side Request Forgery (SSRF)
Software Code Embed Type Plugin Vulnerable versions = 2.5 Fixed in 2.5.1 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-10814 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 4cf23fa82f5e Credits Max Boll b0lli Required privilege...
WordPress Embed documents shortcode Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)
Software Embed documents shortcode Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51904 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 13d94824e115 Credits SOPROBRO Required privilege...
firefox: thunderbird: Permission leak via embed or object elements
The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...
firefox: thunderbird: Permission leak via embed or object elements
The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...
firefox: thunderbird: Permission leak via embed or object elements
The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...
firefox: thunderbird: Permission leak via embed or object elements
The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...
firefox: thunderbird: Permission leak via embed or object elements
The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...
ai.ylyue:yue-library-base (>=finchley.sr4, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +1187 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.35, <=8.5.100)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.35, =finchley.sr4, =finchley.sr4, =finchley.sr4, =finchley.sr4, =finchley.sr4, =1.5.19.release, =1.5.19.release, =1.5.19.release, =1.9.0-m1, =1.7.0, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.0.1, =0.0.7...
ai.ylyue:yue-library-base (>=finchley.sr4, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +1187 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.35, <=8.5.100)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.35, =finchley.sr4, =finchley.sr4, =finchley.sr4, =finchley.sr4, =finchley.sr4, =1.5.19.release, =1.5.19.release, =1.5.19.release, =1.9.0-m1, =1.7.0, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.0.1, =0.0.7...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13387 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.13, <=9.0.89)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.13, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2024-38286 Source advisory: OSV:GHSA-7JQF-V358-P8G7...
io.sniffy:sniffy-integration-tests-tomcat (>=3.1.10, <=3.1.14), net.unit8.waitt.server:waitt-tomcat7 (>=1.3.0-beta1, <=1.3.0) +5 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.92, <=7.0.109)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.92, =3.1.10, =1.3.0-beta1, =2.0.0, =7.0.92, =7.0.92, =4.3.0, =3.10.7, =4.8.0 Source cves: CVE-2024-38286 Source advisory: OSV:GHSA-7JQF-V358-P8G7...