CVE-2024-37537

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in UusWeb.Ee WS Contact Form allows Stored XSS.This issue affects WS Contact Form: from n/a through 1.3.7...

CVE-2024-37537 WordPress WS Contact Form plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in UusWeb.Ee WS Contact Form allows Stored XSS.This issue affects WS Contact Form: from n/a through 1.3.7...

CVE-2024-37537

CVE-2024-37537 is a Stored XSS vulnerability in the WordPress plugin WS Contact Form (WordPress plugin: WS Contact Form). Affected versions are 1.3.7 and earlier; root cause is improper input neutralization during web page generation, enabling stored cross-site scripting. Public references confir...

CVE-2024-37537: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in UusWeb.Ee WS Contact Form allows Stored XSS.This issue affects WS Contact Form: from n/a through 1.3.7...

CVE-2024-38091

Microsoft WS-Discovery Denial of Service Vulnerability...

CVE-2024-38091

Microsoft WS-Discovery Denial of Service Vulnerability...

CVE-2024-38091 Microsoft WS-Discovery Denial of Service Vulnerability

...

CVE-2024-38091 Microsoft WS-Discovery Denial of Service Vulnerability

...

CVE-2024-38091

Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.

Microsoft WS-Discovery Denial of Service Vulnerability

...

CVE-2024-38091: Improper Handling of Missing Special Element

Microsoft WS-Discovery Denial of Service Vulnerability...

PT-2024-4774

Name of the Vulnerable Software and Affected Versions: Microsoft WS-Discovery affected versions not specified Description: The issue is related to the implementation of the Web Services Dynamic Discovery WS-Discovery protocol in Windows operating systems, specifically due to incorrect handling of...

WordPress WS Contact Form plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by younsoung kim, SeoHyeon Lee, MyungJu Kim, SeoHee Kang in WordPress Plugin WS Contact Form versions = 1.3.7...

WordPress WS Contact Form Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Software WS Contact Form Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37537 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9166c1a50a0c Credits younsoung kim, SeoHyeon Lee, MyungJu...

Malicious code in ws-paso-jssdk (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3963 Malicious code in ws-paso-jssdk (npm)

--- -= Per source details. Do not edit below this line.=-...

Denial Of Service (DoS)

ws is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of the Upgrade header when the number of received headers exceeds the server.maxHeadersCount or request.maxHeadersCount threshold, causing incomingMessage.headers.upgrade to not be set. Attackers can use this...

AZL-45066 CVE-2024-37890 affecting package js-jquery 3.5.0-4

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

0.edsql (>=1.0.49, <=1.0.50), 0x-v4-nft (1.1.0) +8871 more potentially affected by CVE-2024-37890 via ws (>=7.0.0, <=7.5.9)

ws NPM version =7.0.0, =1.0.49, =0.0.11, =0.0.2, =1.0.0, =0.1.0, =0.0.12, =0.0.12, =0.1.0, =1.0.22, =3.10.1, =3.11.0 and more Source cves: CVE-2024-37890 Source advisory: OSV:GHSA-3H5V-Q93C-6H6Q...

7ghost (>=4.11.25, <=4.11.46), @100mslive/hms-excalidraw (>=0.1.3, <=0.1.14) +1256 more potentially affected by CVE-2024-37890 via ws (>=6.0.0, <=6.2.2)

ws NPM version =6.0.0, =4.11.25, =0.1.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =7.0.0-rc1, =0.1.0, =4.4.0-rc.1, =4.2.2, =2.9.0, =0.0.1-alpha.95, =1.0.0-alpha.46, =1.2.0, =1.6.2 and more Source cves: CVE-2024-37890 Source advisory: OSV:GHSA-3H5V-Q93C-6H6Q...