PT-2024-22136

Name of the Vulnerable Software and Affected Versions Elementor Addon Elements plugin for WordPress versions up to, and including, 1.13.2 Description The issue is related to Stored Cross-Site Scripting via widgets due to insufficient input sanitization and output escaping on user-supplied...

CVE-2024-2335: Improper Neutralization of Input During Web Page Generation

The Elements Plus! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget link URLs in all versions up to, and including, 2.16.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

The vulnerability of TP-Link Omada ER605 VPN router’s microprogramming software arises from the lack of measures taken to eliminate special elements used in the operating system’s command set. This vulnerability allows a hacker to execute arbitrary code in the root user context.

The vulnerability of TP-Link Omada ER605 VPN router’s microprogramming software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root user’s...

CVE-2024-31234

CVE-2024-31234 affects the REHub Framework (WordPress) with an authenticated SQL Injection vulnerability in the framework prior to version 19.6.2. The issue is due to improper neutralization of special elements used in SQL commands. Evidence in connected RH data confirms the vulnerability, its au...

CVE-2024-31233: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19.6.1...

CVE-2024-2132

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Widget in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-2132 Ultimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Widget

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Widget in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

The vulnerability of the Brocade Fabric OS operating system arises from the failure to take measures to eliminate special elements used in the operating system command set. This allows attackers to execute arbitrary code and elevate their privileges to the root user level.

The vulnerability of the Brocade Fabric OS exists because measures are not taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and elevate their privileges to the root user...

CVE-2024-2132: Improper Neutralization of Input During Web Page Generation

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Widget in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-25007

Ericsson Network Manager ENM, versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The...

CVE-2024-25007 Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability

Ericsson Network Manager ENM, versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The...

CVE-2024-26809

The CVE-2024-26809 vulnerability is in the Linux kernel's netfilter nft_set_pipapo code. The clone path previously could destroy elements using a stale view of the lookup table, risking double-destroy of elements; the fix ensures clone uses a current view to perform destruction. A patch sequence ...

WordPress Elements kit Elementor addons Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.7 Fixed in 3.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2803 Patch priority Low CVSS severity Low 6.5 Developer Wpmet PSID 88e697466103 Credits Webbernaut Required...

The vulnerability of the bgpattrpsid_sub() function in the networking routing implementation software for Unix-like systems allows a attacker to cause a service failure.

The vulnerability of the bgpattrpsidsub function in the networking routing implementation software for Unix-like systems in FRRouting is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to cause service failures remote...

CVE-2024-27972

Improper Control of Generation of Code 'Code Injection' vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.This issue affects WP Fusion Lite: from n/a through = 3.41.24...

CVE-2024-26682 wifi: mac80211: improve CSA/ECSA connection refusal

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: improve CSA/ECSA connection refusal As mentioned in the previous commit, we pretty quickly found that some APs have ECSA elements stuck in their probe response, so using that to not attempt to connect while CSA is...

ROS-20240402-10

A vulnerability in the NetScreen file parser of Wireshark, a computer network traffic analyzer, is related to an operation exceeding buffer boundaries. operation out of buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service Vulnerabilit...

PT-2024-3798 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 124 Description: The issue is related to the browser's handling of insecure elements added to a page after a delay, which could lead to a mixed content security status not being properly indicated. This could...

PT-2024-21460

Name of the Vulnerable Software and Affected Versions Linux kernel versions = 6.7.4 Description The issue is related to the wifi mac80211 component in the Linux kernel, where some access points APs have ECSA elements stuck in their probe response. This causes the kernel to not attempt to connect...

The vulnerability of the setAction function (/itbox_pi/networksafe.php?a=set) in the Ruijie RG-EG series of router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the setAction function /itbox.pi.networksafe.php?a=set in the Ruijie RG-EG series of router microprogramming systems is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote...