4280 matches found
CVE-2024-38269
creationtimestamp| type| source ---|---|--- 2024-09-24 04:51:54+00:00| seen| https://t.me/cvedetector/6230...
CVE-2024-8738
creationtimestamp| type| source ---|---|--- 2024-09-24 04:51:53+00:00| seen| https://t.me/cvedetector/6228...
CVE-2024-8662
creationtimestamp| type| source ---|---|--- 2024-09-24 04:51:51+00:00| seen| https://t.me/cvedetector/6226...
CVE-2024-7024
creationtimestamp| type| source ---|---|--- 2024-09-24 02:21:29+00:00| seen| https://t.me/cvedetector/6225...
CVE-2024-7023
creationtimestamp| type| source ---|---|--- 2024-09-24 02:21:28+00:00| seen| https://t.me/cvedetector/6224...
CVE-2024-7018
creationtimestamp| type| source ---|---|--- 2024-09-24 00:41:06+00:00| seen| https://t.me/cvedetector/6219...
CVE-2023-7281
creationtimestamp| type| source ---|---|--- 2024-09-24 00:41:00+00:00| seen| https://t.me/cvedetector/6216...
WordPress NiceJob Plugin < 3.6.5 is vulnerable to Cross Site Scripting (XSS)
Software NiceJob Type Plugin Vulnerable versions 3.6.5 Fixed in 3.6.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44025 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID afa3856f254d Credits stealthcopter Required privilege Contributor...
WordPress WP Easy Gallery Plugin <= 4.8.5 is vulnerable to Broken Access Control
Software WP Easy Gallery Type Plugin Vulnerable versions = 4.8.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-8437 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 29e098328a72 Credits Lucio Sá Required privilege...
WordPress Contact Form to Any API Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)
Software Contact Form to Any API Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7617 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8a05dbbe144d Credits Jorgson...
WordPress Pixel Cat Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)
Software Pixel Cat Type Plugin Vulnerable versions = 3.0.5 Fixed in 3.0.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8544 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4e86320ad402 Credits vgo0 Required privilege...
WordPress WordPress Meta Data and Taxonomies Filter (MDTF) Plugin <= 1.3.3.3 is vulnerable to SQL Injection
Software WordPress Meta Data and Taxonomies Filter MDTF Type Plugin Vulnerable versions = 1.3.3.3 Fixed in 1.3.3.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-8624 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 72c934040045 Credits Krzysztof Zając...
WordPress Google Calendar Events Plugin <= 3.4.2 is vulnerable to Cross Site Scripting (XSS)
Software Google Calendar Events Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8549 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9f01a635ec08 Credits vgo0 Requir...
GLSA-202409-24 : Tor: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202409-24 Tor: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...
CVE-2024-47066
creationtimestamp| type| source ---|---|--- 2024-09-23 18:49:37+00:00| seen| https://t.me/cvedetector/6191 2024-09-24 10:01:15+00:00| seen| https://t.me/GithubRedTeam/8585 2024-09-24 19:46:07+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/4027 2024-09-25 05:16:47+00:00|...
FreeBSD : FreeBSD -- pf incorrectly matches different ICMPv6 states in the state table (f140cff0-771a-11ef-9a62-002590c1f29c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f140cff0-771a-11ef-9a62-002590c1f29c advisory. In ICMPv6 Neighbor Discovery ND, the ID is always 0. When pf is configured to allow ND and block incomi...
CVE-2022-4533
creationtimestamp| type| source ---|---|--- 2024-09-19 06:57:47+00:00| seen| https://t.me/cvedetector/6040...
Proroute H685 4G router vulnerabilities
TL;DR Two vulnerabilities on the Proroute H685t-w 4G Router Authenticated command injection is possible through the admin interface Reflected Cross Site-Scripting is possible through the admin interface Patch any routers to revision 3.2.335 or higher Vulnerability 1: Command Injection on Proroute...
FreeBSD : OpenSSH -- Pre-authentication async signal safety issue (58750d49-7302-11ef-8c95-195d300202b3)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 58750d49-7302-11ef-8c95-195d300202b3 advisory. The FreeBSD Project reports: A signal handler in sshd8 may call a logging function that is not async-...