WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FOX versions = 1.4.2...

Delta Electronics DIAScreen

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : DIAScreen Vulnerability : Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a stack-based buffer...

Baidu UEditor 跨站脚本漏洞

Baidu UEditor is a WYSIWYG rich text web editor from the Chinese company Baidu. A cross-site scripting vulnerability exists in Baidu UEditor 1.4.2, which stems from a manipulation of the parameter source that can lead to cross-site scripting attacks...

PT-2024-38277 · Baidu · Baidu Ueditor

Name of the Vulnerable Software and Affected Versions: Baidu UEditor version 1.4.2 Description: A vulnerability was found in the file /ueditor142/php/controller.php?action=catchimage, where the manipulation of the argument source leads to cross site scripting. The attack can be initiated remotely...

CVE-2024-37521

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in zwwooooo zBench allows Stored XSS.This issue affects zBench: from n/a through 1.4.2...

CVE-2024-37521

CVE-2024-37521 describes a Stored XSS vulnerability in the WordPress theme zBench, affecting version 1.4.2 and earlier (no patch information provided in the supplied documents). The description specifies Improper Neutralization of Input During Web Page Generation as the root cause, enabling store...

WordPress plugin Houzez CRM security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-37158 · WordPress · Houzez Crm

Name of the Vulnerable Software and Affected Versions: Houzez CRM plugin for WordPress versions up to, and including, 1.4.2 Description: The issue is related to time-based SQL Injection via the notes belong to parameter due to insufficient escaping on the user-supplied parameter and lack of...

CVE-2024-37462

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2...

WordPress plugin Ultimate Bootstrap Elements for Elementor Path Traversal Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Ultimate Bootstrap Elements for Elementor versions = 1.4.2...

OPENSUSE-SU-2024:10206-1 python-bjoern-1.4.2-1.23 on GA media

These are all security issues fixed in the python-bjoern-1.4.2-1.23 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12528-1 python310-jwcrypto-1.4.2-1.1 on GA media

These are all security issues fixed in the python310-jwcrypto-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-32824

Missing Authorization vulnerability in Evergreen Content Poster.This issue affects Evergreen Content Poster: from n/a through 1.4.2...

WordPress plugin Evergreen Content Poster security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

CVE-2024-3166 Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm

A Cross-Site Scripting XSS vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of the web application. The vulnerability arises from the application's feature to fetch and embed content from websites into workspaces, whic...

CVE-2024-3166 Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm

A Cross-Site Scripting XSS vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of the web application. The vulnerability arises from the application's feature to fetch and embed content from websites into workspaces, whic...

CVE-2024-3166

Summary: CVE-2024-3166 affects mintplex-labs/anything-llm, including desktop v1.2.0 to v1.4.1 and the web app. The vulnerability is an XSS in the feature that fetches and embeds external website content into workspaces, with a route to Remote Code Execution in the desktop app due to Electron sett...

DEBIAN-CVE-2024-34997

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper.readarray. NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content...

PYSEC-2024-277

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper.readarray. NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content...