CVE-2024-36821

Insecure permissions in Linksys Velop WiFi 5 WHW01v1 1.1.13.202617 allows attackers to escalate privileges from Guest to root...

CVE-2024-31402

CVE-2024-31402 affects Cybozu Garoon 5.0.0–5.15.2 and is caused by an incorrect authorization check that allows a remote authenticated attacker to delete data in Shared To-Dos. The vulnerability impact is data deletion with MEDIUM severity (CVSS v3.1 base score 4.3). Remediation is to update to t...

CVE-2024-36821

Insecure permissions in Linksys Velop WiFi 5 WHW01v1 1.1.13.202617 allows attackers to escalate privileges from Guest to root...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores from Aimeos Open Source. A security vulnerability exists in versions of Aimeos prior to 2024.04.5, which originates from a user with administrative privileges being able to upload files that look like images but contain PHP code that...

CVE-2024-36821

CVE-2024-36821 affects Linksys Velop WiFi 5 (WHW01v1) with firmware 1.1.13.202617. The Red Hat and NVD entries describe insecure permissions that permit escalation from Guest to root, indicating a privilege-escalation vulnerability. The exact vulnerable component is a permissions/authorization is...

CVE-2024-32725

Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue affects 5 Stars Rating Funnel: from n/a through = 1.2.67...

CVE-2024-32725 WordPress 5 Stars Rating Funnel plugin 1.2.67 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saleswonder 5 Stars Rating Funnel.This issue affects 5 Stars Rating Funnel: from n/a through 1.2.67...

CVE-2024-32725

CVE-2024-32725 is a Missing Authorization vulnerability in the WordPress plugin 5 Stars Rating Funnel (5-stars-rating-funnel) affecting versions up to 1.2.67. The connected records indicate this is a publicly tracked issue with a patched status (patch details not provided in the sources). The CVE...

Fedora: Security Advisory for kf5-kwayland (FEDORA-2024-2e27372d4c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openmoves.com Cross Site Scripting vulnerability OBB-3933033

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

c21clp.com Cross Site Scripting vulnerability OBB-3932996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 40 Update: kf5-kwayland-5.115.0-3.fc40

KDE Frameworks 5 library that wraps Client and Server Wayland libraries...

WordPress ProfileGrid Plugin <= 5.8.6 is vulnerable to Broken Access Control

Software ProfileGrid Type Plugin Vulnerable versions = 5.8.6 Fixed in 5.8.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5453 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cc4be9b4d163 Credits Lucio Sá Required privilege...

WordPress Login/Signup Popup Plugin <= 2.7.2 is vulnerable to Broken Access Control

Software Login/Signup Popup Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5324 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 8315f4731f19 Credits 1337Wannabe - home Requir...

WordPress Brizy Plugin <= 2.4.43 is vulnerable to Cross Site Scripting (XSS)

Software Brizy Type Plugin Vulnerable versions = 2.4.43 Fixed in 2.4.44 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2087 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ead457b1b8e9 Credits wesley wcraft Required...

RHEL 5 : eclipse (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - eclipse: Help Content web application vulnerable to multiple XSS CVE-2010-4647 - Multiple cross-site...

RHEL 5 : pcsc-lite (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - pcsc-lite: Stack-based buffer overflow in Answer-to-Reset ATR decoder CVE-2010-4531 Note that Nessus has not tested...

RHEL 5 : libxp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libXp: Integer overflow leading to heap-based buffer overflow CVE-2013-2062 Note that Nessus has not tested for thi...

RHEL 5 : ecryptfs-utils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ecryptfs-utils: default salt is used for wrapping passphrase CVE-2014-9687 Note that Nessus has not tested for this...

RHEL 5 : php53 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - php: buffer overflow in pharsetinode CVE-2015-3329 - php: memory corruption in pharparsetarfile caused by...