2423 matches found
CVE-2024-28002
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0...
CVE-2023-39309
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1...
CVE-2024-28002
Cornerstone (WordPress plugin) CVE-2024-28002 describes a Reflected XSS vulnerability in Cornerstone versions up to 0.8.0. The issue is caused by improper neutralization of input during web page generation, enabling script execution in a victim’s browser. Patch status shown in connected data is P...
CVE-2024-29239
Summary (CVE-2024-29239) : A SQL injection vulnerability exists in the Recording.CountByCategory webapi component of Synology Surveillance Station prior to 9.2.0-11289 and 9.2.0-9289. The issue stems from improper neutralization of special elements in SQL commands, enabling remote authenticated u...
CVE-2024-29236
Synology Surveillance Station is affected by CVE-2024-29236 due to an SQL injection vulnerability in the AudioPattern.Delete webapi component. The flaw arises from improper neutralization of special elements used in SQL commands, enabling remote authenticated users to read the database and cause ...
CVE-2024-29230
This CVE affects Synology Surveillance Station, specifically the SnapShot.CountByCategory webapi component. The root cause is improper neutralization of SQL commands (SQL injection) in this endpoint, allowing remote authenticated users to inject SQL and read data from the database, with potential...
CVE-2024-30200
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2...
CVE-2024-30241
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...
CVE-2024-30236
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through = 21.3.4...
CVE-2024-30236
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.4...
CVE-2024-30200
The CVE-2024-30200 entry describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress BEAR plugin (BEAR – Bulk Editor and Products Manager) by Pluginus.Net, affecting versions up to and including 1.1.4.2. The issue arises from insufficient input sanitization and output escaping...
CVE-2024-30239
CVE-2024-30239: Zoho Campaigns WordPress plugin is affected up to v2.0.6 with an SQL injection vulnerability due to improper/insufficient escaping. Connected sources indicate this entry has been patched in later versions; remediation is to upgrade to a newer release (beyond 2.0.6). Exploitation s...
CVE-2024-30240
The CVE-2024-30240 entry concerns the WordPress Calendarista plugin (versions up to 15.5.7). Root cause: improper neutralization of special elements in SQL commands leading to an SQL Injection vulnerability. Affects authenticated users with subscriber-level access and above; exploitation could al...
CVE-2024-30243
CVE-2024-30243 is an SQL Injection affecting the WordPress Tooltips plugin prior to 9.4.5, caused by improper neutralization of SQL elements. The metric indicates a base CVSS v3.1 score of 8.5 (HIGH) with network attack vector, low attack complexity, and user interaction NONE. Affected software: ...
CVE-2024-30244
CVE-2024-30244 affects the WordPress plugin Church Admin (versions
CVE-2024-28015
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2,...
WordPress Plugin Church Admin 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
WordPress Plugin WP Testimonials 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
CVE-2024-30238
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through = 21.3.2...