CVE-2024-27358

A security vulnerability exists in WithSecure Elements Agent and WithSecure Elements Client Security (versions through 23.x ) for macOS . The issue allows local users to block an administrator from completing an installation, resulting in a Denial-of-Service (DoS) . To remediate this, users shoul...

CVE-2024-27358

An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service DoS...

WithSecure Elements 安全漏洞

WithSecure Elements is an online tool from the Finnish company WithSecure. It is used to transform data into customizable and informative reports and dashboards. A security vulnerability exists in WithSecure Elements version 23.x and earlier versions. An attacker can elevate privileges by...

CVE-2024-27357

An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS. Local Privilege Escalation can occur during installations or updates by admins...

CVE-2024-27358

An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service DoS...

kernel: nftables: nft_set_rbtree skip end interval element from gc

A flaw was found in the Linux kernel’s Netfilter subsystem. This issue occurs in the nftsetrbtree. rbtree lazy gc on insert, which might collect an end interval element just added in a transaction and skip the end interval elements not yet active...

kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()

A vulnerability was found in the Linux kernel's qla2xxx SCSI driver, specifically in the qlaedifappgetstats function, where an off-by-one error in array access could lead to memory corruption. This issue affects the appreply-elem array, where an incorrect comparison allowed out-of-bounds access...

The vulnerability of the formWriteFacMac function in the microprogramming software for wireless Wi-Fi routers Tenda W30E allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function in the Tenda W30E wireless Wi-Fi router software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of Adobe Dreamweaver’s HTML editor arises from the lack of measures taken to eliminate special elements used in the operating system command line. This allows attackers to execute arbitrary code.

The vulnerability of Adobe Dreamweaver exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a perpetrator to execute arbitrary code by sending a specially created malicious file...

CVE-2024-38692: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Spiffy Plugins Spiffy Calendar allows SQL Injection.This issue affects Spiffy Calendar: from n/a through 4.9.11...

CVE-2024-38708: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory &...

CVE-2024-37466

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements.This issue affects Mega Elements: from n/a through 1.2.2...

CVE-2024-37466

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements.This issue affects Mega Elements: from n/a through 1.2.2...

CVE-2024-37466 WordPress Mega Elements plugin <= 1.2.2 - Contributor+ Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements.This issue affects Mega Elements: from n/a through 1.2.2...

CVE-2024-37466 WordPress Mega Elements plugin <= 1.2.2 - Contributor+ Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements.This issue affects Mega Elements: from n/a through 1.2.2...

CVE-2024-37466

CVE-2024-37466 describes an XSS vulnerability in the WordPress plugin Mega Elements (Addons for Elementor) . The issue is caused by improper neutralization of input during web page generation and affects Mega Elements: from n/a through 1.2.2 . Connected documents corroborate the vulnerability und...

PT-2024-27577

Name of the Vulnerable Software and Affected Versions Kraftplugins Mega Elements versions 1.2.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for the execution of malicious scripts o...

CVE-2024-37466: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements.This issue affects Mega Elements: from n/a through 1.2.2...

CVE-2024-0857

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection. This issue affects FlexWater Corporate Water Management: before 5.452.0...

CVE-2024-0857

CVE-2024-0857 concerns an SQL Injection in FlexWater Corporate Water Management from Universal Software Inc. The PT-2024-15870 entry specifies the vulnerable line as versions prior to 5.452.0, with remediation to upgrade to 5.452.0 or later and a temporary measure to restrict access to sensitive ...