6291 matches found
WordPress Custom Field For WP Job Manager Plugin <= 1.2 is vulnerable to Insecure Direct Object References (IDOR)
Software Custom Field For WP Job Manager Type Plugin Vulnerable versions = 1.2 Fixed in 1.3 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-7049 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3021ad422dd8 Credits...
WordPress wpForo Forum Plugin <= 2.3.4 is vulnerable to Insecure Direct Object References (IDOR)
Software wpForo Forum Type Plugin Vulnerable versions = 2.3.4 Fixed in 2.3.5 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-43288 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 84baf52495a3 Credits Ananda Dhakal...
WordPress Purity Of Soul Theme <= 1.9 is vulnerable to Cross Site Scripting (XSS)
Software Purity Of Soul Type Theme Vulnerable versions = 1.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43348 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2e3680e055fd Credits justakazh Required privilege...
WordPress Hello Agency Theme <= 1.0.5 is vulnerable to Broken Access Control
Software Hello Agency Type Theme Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43341 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID dad92fd9c880 Credits Fariq Fadillah Gusti Insani...
WordPress Plugin Notes Plus Plugin <= 1.2.7 is vulnerable to Arbitrary Content Deletion
Software Plugin Notes Plus Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A1: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2024-43326 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 048345824ef6 Credits Trương Hữu Phúc...
PostgreSQL 12.x < 12.20 / 13.x < 13.16 / 14.x < 14.13 / 15.x < 15.8 / 16.x 16.4 SQL Injection<
The version of PostgreSQL installed on the remote host is 12 prior to 12.20, 13 prior to 13.16, 14 prior to 14.13, 15 prior to 15.8, or 16 prior to 16.4. As such, it is potentially affected by a vulnerability : - Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an...
CVE-2024-5849
creationtimestamp| type| source ---|---|--- 2024-08-13 16:16:57+00:00| seen| https://t.me/cvedetector/3015...
CVE-2024-33535
creationtimestamp| type| source ---|---|--- 2024-08-12 18:27:15+00:00| seen| https://t.me/cvedetector/2847 2025-03-19 16:18:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8085...
PostgreSQL TOCTOU Vulnerability (Aug 2024) - Linux
PostgreSQL is prone to a time-of-check time-of-use TOCTOU race condition vulnerability in pgdump. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
GLSA-202408-16 : re2c: Denial of Service
The remote host is affected by the vulnerability described in GLSA-202408-16 re2c: Denial of Service Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory. Note that Nessus has not test...
CVE-2024-42357
creationtimestamp| type| source ---|---|--- 2024-08-08 18:04:29+00:00| seen| https://t.me/cvedetector/2792 2025-04-16 01:49:06+00:00| seen| https://t.me/cvedetector/23032 2025-04-16 18:56:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12139...
CVE-2024-41911
creationtimestamp| type| source ---|---|--- 2024-08-06 16:41:38+00:00| seen| https://t.me/cvedetector/2592...
CVE-2024-37286
creationtimestamp| type| source ---|---|--- 2024-08-03 19:16:34+00:00| seen| https://t.me/cvedetector/2397...
CVE-2024-38888
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform a Password Brute Forcing attack due to improper restriction of excessive authentication attempts...
CVE-2024-41701
creationtimestamp| type| source ---|---|--- 2024-07-30 13:14:16+00:00| seen| https://t.me/cvedetector/2033...
CVE-2024-42131
In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with assumptions that dirty limits in PAGESIZE units fit into 32-bit so that various multiplications fit into 64-bits. If limits end up bein...
CVE-2024-42131 mm: avoid overflows in dirty throttling logic
In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with assumptions that dirty limits in PAGESIZE units fit into 32-bit so that various multiplications fit into 64-bits. If limits end up bein...
CVE-2024-7189
creationtimestamp| type| source ---|---|--- 2024-07-29 11:16:33+00:00| seen| https://t.me/cvedetector/1827...
CVE-2024-27358
creationtimestamp| type| source ---|---|--- 2024-07-26 19:42:39+00:00| seen| https://t.me/cvedetector/1706 2026-01-29 16:15:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mdl6omhgqv2j...