1373 matches found
CVE-2024-56021
CVE-2024-56021 affects Category Post Shortcode (WordPress). The issue is a Stored XSS caused by improper neutralization of input during web page generation for the Category Post Shortcode, with affected versions up to 2.4. The vulnerability is listed as patched in the referenced material, but no ...
PT-2024-36672 · Unknown · Ibnuyahya Category Post Shortcode
Name of the Vulnerable Software and Affected Versions: ibnuyahya Category Post Shortcode versions 2.4 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the ibnuyahya...
PT-2024-17909 · Softiron · Softiron Hypercloud
Name of the Vulnerable Software and Affected Versions: SoftIron HyperCloud versions 2.3.0 through 2.4.x Description: An issue exists where authenticated, but non-admin users can create data pools, potentially impacting the performance and availability of the backend software-defined storage...
PT-2024-17827 · Unknown · Phpgurukul Blood Bank & Donor Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Blood Bank & Donor Management System version 2.4 Description: A vulnerability has been found in the system, classified as problematic, affecting unknown code of the file /logout.php. The manipulation leads to cross-site request...
CVE-2024-55984 WordPress Saksh Escrow System plugin <= 2.4 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in susheelhbti Saksh Escrow System saksh-escrow-system allows SQL Injection.This issue affects Saksh Escrow System: from n/a through = 2.4...
CVE-2024-55984
CVE-2024-55984 is an SQL Injection vulnerability in Saksh Escrow System (authenticated) affecting versions up to 2.4. Root cause is improper neutralization of special elements in SQL commands. The CVSS 3.1 base score is 8.5 (HIGH) with NETWORK attack vector, LOW complexity, LOW privileges require...
CVE-2024-54330 WordPress Hurrakify plugin <= 2.4 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in hurraki Hurrakify hurrakify allows Server Side Request Forgery.This issue affects Hurrakify: from n/a through = 2.4...
PT-2024-36214 · Hurrakify · Hurrakify
Name of the Vulnerable Software and Affected Versions: Hurrakify versions n/a through 2.4 Description: A Server-Side Request Forgery SSRF vulnerability is present in Hurrakify, enabling Server Side Request Forgery. This issue allows for the reading of application data. Recommendations: For versio...
WordPress Hurrakify plugin <= 2.4 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Hurrakify versions = 2.4...
CVE-2024-53939
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The /cgi-bin/luci/admin/opsw/Dualfrequnapple endpoint is vulnerable to command injection through the 2.4 GHz and 5 GHz name parameters, allowing an attacker to execute arbitrary commands on t...
CVE-2024-53939
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The /cgi-bin/luci/admin/opsw/Dualfrequnapple endpoint is vulnerable to command injection through the 2.4 GHz and 5 GHz name parameters, allowing an attacker to execute arbitrary commands on t...
RHSA-2024:2891 Red Hat Security Advisory: httpd:2.4 security update
Bulletin has no description...
RHSA-2024:2907 Red Hat Security Advisory: httpd:2.4 security update
Bulletin has no description...
RHSA-2024:1786 Red Hat Security Advisory: httpd:2.4/mod_http2 security update
Bulletin has no description...
Magento Open Source Improper Authorization vulnerability
Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on...
GHSA-CG52-68FV-94QQ Magento Open Source Improper Access Control vulnerability
Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have high impact on...
CVE-2024-45131
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on...
PT-2024-6959 · Adobe · Magento Open Source +1
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description: The issue is related to an Improper Access Control vulnerability that...