CVE-2024-10797: Authorization Bypass Through User-Controlled Key

The Full Screen Menu for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.7 via the Full Screen Menu Elementor Widget due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers,...

WordPress Full Screen Menu for Elementor plugin <= 1.0.7 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Full Screen Menu for Elementor versions = 1.0.7...

Huawei HarmonyOS UIExtension Module Cross-Process Screen Stack Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the Huawei HarmonyOS UIExtension module, which can be exploited by attackers to compromise confidentiality...

CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

PT-2024-27743

Name of the Vulnerable Software and Affected Versions Sunbird DCIM dcTrack version 9.1.2 Description An HTML injection issue allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen. This can be exploited by attackers with administrative access to inject...

CVE-2024-37773: Improper Control of Generation of Code

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-54119

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54119

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54117

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54117

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54112

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54110

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54104

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54110

CVE-2024-54110 describes a cross-process screen stack vulnerability in Huawei HarmonyOS’s UIExtension module. Available documents indicate potential confidentiality impact, but do not specify affected versions, root cause details, exploit status, or a fix. Monitor Huawei security bulletins for re...

CVE-2024-54110

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54104

Huawei HarmonyOS UIExtension cross-process page/screen stacking vulnerability affects the UIExtension module, with potential confidentiality impact. Root cause described as cross-process stacking, but explicit exploit details, affected versions, and a patch/fix are not provided across the connect...

CVE-2024-54485

The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen...

CVE-2024-44248

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A user with screen sharing access may be able to view another user's screen...

CVE-2024-44248

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A user with screen sharing access may be able to view another user's screen...

PT-2024-36036 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...