1162 matches found
CVE-2024-49291 WordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0...
PT-2024-32515 · Wpmanageninja Llc · Fluent Support
Name of the Vulnerable Software and Affected Versions: WPManageNinja LLC Fluent Support versions 1.8.0 and earlier Description: The issue is related to an SQL Injection vulnerability, which allows attackers to manipulate SQL commands. This poses a serious cybersecurity risk. Recommendations: For...
CVE-2024-47372
CVE-2024-47372 : Stored XSS in the TNC PDF viewer (ThemeNcode) due to improper input neutralization during web page generation. Affected: TNC PDF viewer versions ≤ 3.1.0. Impact per Patchstack CVE data: low severity (CVSS 5.9) with potential stored cross-site scripting. Mitigation: update to vers...
CVE-2024-47372 WordPress TNC PDF viewer plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 3.1.0...
CVE-2024-47631
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Logo Carousel – Clients logo carousel for WP responsive-client-logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel – Clients logo carousel for WP: from n/a through = 1....
CVE-2024-47631 WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Logo Carousel – Clients logo carousel for WP responsive-client-logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel – Clients logo carousel for WP: from n/a through = 1....
CVE-2024-47631 WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Logo Carousel – Clients logo carousel for WP responsive-client-logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel – Clients logo carousel for WP: from n/a through = 1....
CVE-2024-47631
CVE-2024-47631: Stored XSS in Logo Carousel – Clients logo carousel for WP (bPlugins LLC) affecting WP plugin versions up to 1.2. Root cause is improper neutralization of input during web page generation. The issue is categorized as a stored XSS with low to moderate impact per CVSS (6.5, CVSS v3....
CVE-2024-44013
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innate Images LLC VR Calendar vr-calendar-sync allows PHP Local File Inclusion.This issue affects VR Calendar: from n/a through = 2.4.0...
CVE-2024-44013
CVE-2024-44013: WordPress VR Calendar plugin from Innate Images LLC suffers an unauthenticated Local File Inclusion (path traversal) in VR Calendar
CVE-2024-44013 WordPress VR Calendar plugin <= 2.4.0 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innate Images LLC VR Calendar allows PHP Local File Inclusion.This issue affects VR Calendar: from n/a through 2.4.0...
CVE-2024-44013: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innate Images LLC VR Calendar vr-calendar-sync allows PHP Local File Inclusion.This issue affects VR Calendar: from n/a through = 2.4.0...
CVE-2024-46511
LoadZilla LLC LoadLogic v1.4.3 was discovered to contain insecure permissions vulnerability which allows a remote attacker to execute arbitrary code via the LogicLoadEc2DeployLambda and CredsGenFunction function...
CVE-2024-46511
LoadZilla LLC LoadLogic v1.4.3 was discovered to contain insecure permissions vulnerability which allows a remote attacker to execute arbitrary code via the LogicLoadEc2DeployLambda and CredsGenFunction function...
CVE-2024-46511
LoadZilla LLC LoadLogic v1.4.3 was discovered to contain insecure permissions vulnerability which allows a remote attacker to execute arbitrary code via the LogicLoadEc2DeployLambda and CredsGenFunction function...
CVE-2024-44059
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.3.1...
CVE-2024-44059
CVE-2024-44059 is a stored XSS vulnerability in MediaRon LLC Custom Query Blocks for WordPress, affecting versions n/a through 5.3.1. The issue arises from improper input neutralization during web page generation. Public details indicate exploitation could lead to stored script execution; the con...
OracleVM 3.4 : kernel-uek (OVMSA-2024-0011)
The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.89.4- isdn: mISDN: netjet: Fix crash in njprobe: Zheyu Ma Orabug: 36940405 CVE-2021-47284- tracing: Restructure traceclockglobal to never block Steven Rostedt VMware Orabug: 36940388 CVE-2021-46939- ud...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2024-12606)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12606 advisory. - isdn: mISDN: netjet: Fix crash in njprobe: Zheyu Ma Orabug: 36940405 CVE-2021-47284 - tracing: Restructure traceclockglobal to never block Steve...