273 matches found
CVE-2024-56213 WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability
Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through = 4.0.7...
CVE-2024-56213
WordPress Plugin Eventin vulnerable to Path Traversal (pattern '.../...//') in versions n/a–4.0.7, enabling local file access. Root cause: path traversal in Eventin handled via Contributor+ LFI. Affected product: Themewinter Eventin WordPress plugin (
PT-2024-36747 · Themewinter · Eventin
Name of the Vulnerable Software and Affected Versions: Eventin versions n/a through 4.0.7 Description: The issue is a Path Traversal vulnerability, identified by the '.../...//' pattern, which affects Themewinter Eventin. This vulnerability allows for Path Traversal, potentially enabling access t...
WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability
Contributor+ Limited Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Eventin versions = 4.0.7...
WordPress plugin Widget Options 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exist...
CVE-2024-43399
MobSF (Mobile Security Framework) prior to version 4.0.7 contains a Zip Slip vulnerability in the Static Libraries analysis when extracting .a files. The mitigation (decoding and string replacement) is bypassable (e.g., using sequences like ....//....//....//), allowing extraction to arbitrary se...
CVE-2024-6647
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in Croogo up to 4.0.7. This affects an unknown part of the file admin/settings/settings/prefix/Theme of the component Setting Handler. The manipulation of the argument Content-Type leads to unrestricted upload. It is...
PT-2024-37775 · Croogo · Croogo
Name of the Vulnerable Software and Affected Versions: Croogo versions up to 4.0.7 Description: A critical vulnerability has been found in Croogo, affecting an unknown part of the file admin/settings/settings/prefix/Theme of the component Setting Handler. The manipulation of the argument...
OPENSUSE-SU-2024:13067-1 libwireshark16-4.0.7-2.1 on GA media
These are all security issues fixed in the libwireshark16-4.0.7-2.1 package on the GA media of openSUSE Tumbleweed...
WordPress Responsive Tabs Plugin < 4.0.7 is vulnerable to Cross Site Scripting (XSS)
Software Responsive Tabs Type Plugin Vulnerable versions 4.0.7 Fixed in 4.0.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1846 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d1565ae17f3e Credits Dmitrii Ignatyev Required...
WordPress Mailster Plugin <= 4.0.6 is vulnerable to Cross Site Scripting (XSS)
Software Mailster Type Plugin Vulnerable versions = 4.0.6 Fixed in 4.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30503 Patch priority Medium CVSS severity Medium 7.1 Developer EverPress PSID 3aa28982f4b8 Credits Rafie Muhammad Patchstack Required privilege...
WordPress Survey Maker Plugin <= 4.0.6 is vulnerable to Cross Site Scripting (XSS)
Software Survey Maker Type Plugin Vulnerable versions = 4.0.6 Fixed in 4.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29918 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d250068b93d6 Credits Dimas Maulana Required privilege...
PT-2024-11976
Name of the Vulnerable Software and Affected Versions MainWP Wordfence Extension versions through 4.0.7 Description The issue is related to a Missing Authorization vulnerability in the MainWP Wordfence Extension. Recommendations For versions through 4.0.7, update to a version later than 4.0.7 to...
BIT-REDMINE-2020-36308
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...
Design/Logic Flaw
BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...
SUSE CVE-2023-30086
Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...
CVE-2023-30086
Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...
AZL-43927 CVE-2023-30086 affecting package openjpeg2 2.3.1-12
Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...
