CVE-2024-44018 WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in istmoplugins Instant Chat Floating Button for WordPress Websites instant-chat-wp allows PHP Local File Inclusion.This issue affects Instant Chat Floating Button for WordPress Websites: from n/a through =...

CVE-2024-44018 WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Istmo Plugins Instant Chat Floating Button for WordPress Websites allows PHP Local File Inclusion.This issue affects Instant Chat Floating Button for WordPress Websites: from n/a through 1.0.5...

PT-2024-30884

Name of the Vulnerable Software and Affected Versions Istmo Plugins Instant Chat Floating Button for WordPress Websites versions 1.0.0 through 1.0.5 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability...

@saltcorn/cli (>=1.0.0-beta.1, <=1.0.0-beta.13), @saltcorn/mobile-builder (>=1.0.0-beta.1, <=1.0.0-beta.13) +1 more potentially affected by unknown CVE via @saltcorn/plugins-loader (>=1.0.0-beta.1, <=1.0.0-beta.13)

@saltcorn/plugins-loader NPM version =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.13 Source cves: unknown CVE Source advisory: OSV:GHSA-FM76-W8JW-XF8M...

@saltcorn/cli (>=1.0.0-beta.1, <=1.0.0-beta.13), @saltcorn/mobile-builder (>=1.0.0-beta.1, <=1.0.0-beta.13) +1 more potentially affected by unknown CVE via @saltcorn/plugins-loader (>=1.0.0-beta.1, <=1.0.0-beta.13)

@saltcorn/plugins-loader NPM version =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.13 Source cves: unknown CVE Source advisory: GHSA-FM76-W8JW-XF8M...

Jenkins plugins Multiple Vulnerabilities (2024-10-02)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins Credentials Plugin 1380.va435002fa924 and earlier, except 1371.1373.v4ebfab7161e9, does not redact encrypted values of credentials...

PT-2024-40274 · Saltcorn · Saltcorn

Name of the Vulnerable Software and Affected Versions: Saltcorn versions prior to the fixed version Description: The issue arises from the use of user-controlled data in the git clone command without proper validation, leading to a command injection vulnerability. This allows an attacker with adm...

org.jenkins-ci.main:jenkins-test-harness (1.621), org.jenkins-ci.main:jenkins-war (1.621) +2 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.621)

org.jenkins-ci.main:jenkins-core MAVEN version 1.621 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.621 - org.jenkins-ci.main:jenkins-war 1.621 -...

org.jenkins-ci.main:jenkins-test-harness (1.629), org.jenkins-ci.main:jenkins-war (1.629) +1 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.629)

org.jenkins-ci.main:jenkins-core MAVEN version 1.629 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.629 - org.jenkins-ci.main:jenkins-war 1.629 -...

org.jenkins-ci.main:jenkins-test-harness (1.453), org.jenkins-ci.main:jenkins-war (1.453) +3 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.453)

org.jenkins-ci.main:jenkins-core MAVEN version 1.453 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.453 - org.jenkins-ci.main:jenkins-war 1.453 -...

org.jenkins-ci.main:jenkins-test-harness (1.493), org.jenkins-ci.main:jenkins-war (1.493) +3 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.493)

org.jenkins-ci.main:jenkins-core MAVEN version 1.493 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.493 - org.jenkins-ci.main:jenkins-war 1.493 -...

org.jenkins-ci.main:jenkins-test-harness (1.552), org.jenkins-ci.main:jenkins-war (1.552) +1 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.552)

org.jenkins-ci.main:jenkins-core MAVEN version 1.552 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.552 - org.jenkins-ci.main:jenkins-war 1.552 -...

com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2), org.jenkins-ci.main:jenkins-test-harness (1.550) +2 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.550)

org.jenkins-ci.main:jenkins-core MAVEN version 1.550 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.1, =0.2 - org.jenkins-ci.main:jenkins-test-harness...

org.jenkins-ci.main:jenkins-test-harness (1.412), org.jenkins-ci.main:jenkins-war (1.412) +5 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.412)

org.jenkins-ci.main:jenkins-core MAVEN version 1.412 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.412 - org.jenkins-ci.main:jenkins-war 1.412 -...

com.blazemeter.plugins:blazemeterjenkinsplugin (>=2.0, <=2.6), jenkins.plugins.elanceodesk:workplace-notifier (>=1.14, <=1.16) +7 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.576)

org.jenkins-ci.main:jenkins-core MAVEN version 1.576 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =2.0, =1.14, =1.14, =1.5, =1.6 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.584), org.jenkins-ci.main:jenkins-war (1.584) +1 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.584)

org.jenkins-ci.main:jenkins-core MAVEN version 1.584 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.584 - org.jenkins-ci.main:jenkins-war 1.584 -...

org.jenkins-ci.main:jenkins-test-harness (1.584), org.jenkins-ci.main:jenkins-war (1.584) +1 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.584)

org.jenkins-ci.main:jenkins-core MAVEN version 1.584 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.584 - org.jenkins-ci.main:jenkins-war 1.584 -...

org.jenkins-ci.main:jenkins-test-harness (1.589), org.jenkins-ci.main:jenkins-war (1.589) +1 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.589)

org.jenkins-ci.main:jenkins-core MAVEN version 1.589 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.589 - org.jenkins-ci.main:jenkins-war 1.589 -...

com.amazonaws:codedeploy (>=1.3, <=1.11), com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (>=1.1.0, <=1.2.0) +18 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.554)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.3, =1.1.0, =1.2.3, =1.1.0, =1.0, =1.0, =1.0, =2.0.4, =1.10, =1.15,...

com.loadimpact:loadimpact-plugin (>=1.53, <=1.58), org.jenkins-ci.main:jenkins-test-harness (1.535) +5 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.535)

org.jenkins-ci.main:jenkins-core MAVEN version 1.535 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.loadimpact:loadimpact-plugin =1.53, =1.18, =1.1, =1.2 - org.jenkins-ci.plugins:plugin 1.535...