3369 matches found
CVE-2024-35248
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...
CVE-2024-30101
Microsoft Office Remote Code Execution Vulnerability...
CVE-2024-30103
Microsoft Outlook Remote Code Execution Vulnerability...
CVE-2024-30097
Microsoft Speech Application Programming Interface SAPI Remote Code Execution Vulnerability...
CVE-2024-30090
Microsoft Streaming Service Elevation of Privilege Vulnerability...
CVE-2024-30087
Win32k Elevation of Privilege Vulnerability...
CVE-2024-30065
Windows Themes Denial of Service Vulnerability...
CVE-2024-30066
Winlogon Elevation of Privilege Vulnerability...
CVE-2024-30052
Visual Studio Remote Code Execution Vulnerability...
CVE-2024-29060
Visual Studio Elevation of Privilege Vulnerability...
CVE-2024-23503
Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6...
CVE-2023-33922
Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2...
fastify-html (>=0.3.3 <=0.4.0) potentially affected by CVE-2024-37166 via ghtml (=1.7.2)
ghtml NPM version =1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghtml and may be impacted: - fastify-html =0.3.3, =0.4.0 Source cves: CVE-2024-37166 Source advisory: OSV:GHSA-VVHJ-V88F-5GXR...
CVE-2024-35746
Unrestricted Upload of File with Dangerous Type vulnerability in Asghar Hatampoor BuddyPress Cover allows Code Injection.This issue affects BuddyPress Cover: from n/a through 2.1.4.2...
CVE-2024-31284
Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8...
CVE-2024-31352
Missing Authorization vulnerability in Email Subscribers & Newsletters.This issue affects Email Subscribers & Newsletters: from n/a through 5.7.13...
CVE-2024-30534
Missing Authorization vulnerability in typps Calendarista Basic Edition.This issue affects Calendarista Basic Edition: from n/a through 3.0.5...
The vulnerability of the library for cleaning and validating jtidy’s HTML code, related to a stack overflow error, allows a malicious actor to cause a service failure.
The vulnerability of the library for cleaning and validating jtidy HTML code is related to a stack overflow error. Exploiting this vulnerability could allow an attacker to cause service interruptions...
GHSA-4M3G-6R7G-JV4F Arbitrary JavaScript execution due to using outdated libraries
Summary gradio-pdf projects with dependencies on the pdf.js library are vulnerable to CVE-2024-4367, which allows arbitrary JavaScript execution. PoC 1. Generate a pdf file with a malicious script in the fontmatrix. This will run alert‘XSS’. poc.pdf 2. Run the app. In this PoC, I've used the demo...