ACI Worldwide Proactive Risk Manager 安全漏洞

ACI Worldwide Proactive Risk Manager is an electronic payment risk management program from ACI Worldwide, USA. A security vulnerability exists in ACI Worldwide Proactive Risk Manager version 9.1.1.0, which originates from multiple cross-site scripting vulnerabilities in the add/edit form field...

CVE-2024-48461

Cross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote attacker to execute arbitrary code via the New Journey field...

GHSA-F77Q-R5QM-W4M8 sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic

The Gnark recursion circuit constrains arithmetic over BabyBear when the native field of the ZKP circuit is the BN254 scalar field. Proper implementation of this logic requires range checking Bn254 values to be less than the BabyBear modulus. In versions 1.2.0, functions like InvF and InvE used...

CVE-2024-49642

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi Todo Custom Field todo-custom-field allows Reflected XSS.This issue affects Todo Custom Field: from n/a through = 3.0.4...

CVE-2024-49642

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Rafasashi Todo Custom Field allows Reflected XSS.This issue affects Todo Custom Field: from n/a through 3.0.4...

CVE-2024-49642 WordPress Todo Custom Field plugin <= 3.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi Todo Custom Field todo-custom-field allows Reflected XSS.This issue affects Todo Custom Field: from n/a through = 3.0.4...

CVE-2024-49642 WordPress Todo Custom Field plugin <= 3.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Rafasashi Todo Custom Field allows Reflected XSS.This issue affects Todo Custom Field: from n/a through 3.0.4...

CVE-2024-49642

CVE-2024-49642 : Reflected XSS in WordPress Todo Custom Field plugin (

AZL-52038 CVE-2024-50088 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free in addinoderef The addinoderef function does not initialize the "name" struct when it is declared. If any of the following calls to "readoneinode returns NULL, dir = readoneinoderoot,...

CVE-2024-50088 btrfs: fix uninitialized pointer free in add_inode_ref()

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free in addinoderef The addinoderef function does not initialize the "name" struct when it is declared. If any of the following calls to "readoneinode returns NULL, dir = readoneinoderoot,...

PT-2024-33121 · Unknown · Teslalogger

Name of the Vulnerable Software and Affected Versions: TeslaLogger versions prior to 1.59.6 Description: A Cross Site Scripting issue in the Admin Panel allows a remote attacker to execute arbitrary code via the New Journey field. Recommendations: For versions prior to 1.59.6, update to version...

WordPress plugin Todo Custom Field 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-48461

Cross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote attacker to execute arbitrary code via the New Journey field...

TeslaLogger 安全漏洞

TeslaLogger is a self-hosted data logger for Tesla Model S/3/X/Y by Christian P. Personal Developer. A security vulnerability exists in TeslaLogger prior to version 1.59.6 that stems from the execution of arbitrary code via the New Journey field...

The vulnerability of the Apache HttpClient client module of Apache HttpComponents allows a hacker to replace SSL servers.

The vulnerability of the Apache HttpClient client module of Apache HttpComponents is related to incorrect verification of SSL/TLS certificates. Exploiting this vulnerability allows a malicious actor to replace SSL servers by modifying the content in the distincted name DN field...

CVE-2024-48461

Summary: CVE-2024-48461 is a Cross-Site Scripting vulnerability in TeslaLogger Admin Panel prior to version 1.59.6, allowing a remote attacker to execute arbitrary code through the New Journey field. The issue is documented across multiple sources (NVD, Red Hat, OSV, CNNVD, CVE List, etc.). Affec...

CVE-2024-48461

Cross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote attacker to execute arbitrary code via the New Journey field...

MongoDB mongocryptd和MongoDB Mongo_crypt_v1.so 安全漏洞

MongoDB mongocryptd and MongoDB Mongocryptv1.so are both products of MongoDB, Inc. of the U.S.A. MongoDB mongocryptd is a client-side encryption library.MongoDB Mongocryptv1.so is an auto-encryption shared library used to perform encryption and decryption operations. A security vulnerability exis...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2752)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2770)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...