3362 matches found
CVE-2024-30065
Windows Themes Denial of Service Vulnerability...
CVE-2024-30066
Winlogon Elevation of Privilege Vulnerability...
CVE-2024-30052
Visual Studio Remote Code Execution Vulnerability...
CVE-2024-29060
Visual Studio Elevation of Privilege Vulnerability...
CVE-2024-23503
Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6...
CVE-2023-33922
Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2...
fastify-html (>=0.3.3 <=0.4.0) potentially affected by CVE-2024-37166 via ghtml (=1.7.2)
ghtml NPM version =1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghtml and may be impacted: - fastify-html =0.3.3, =0.4.0 Source cves: CVE-2024-37166 Source advisory: OSV:GHSA-VVHJ-V88F-5GXR...
CVE-2024-35746
Unrestricted Upload of File with Dangerous Type vulnerability in Asghar Hatampoor BuddyPress Cover allows Code Injection.This issue affects BuddyPress Cover: from n/a through 2.1.4.2...
CVE-2024-31284
Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8...
CVE-2024-31352
Missing Authorization vulnerability in Email Subscribers & Newsletters.This issue affects Email Subscribers & Newsletters: from n/a through 5.7.13...
CVE-2024-30534
Missing Authorization vulnerability in typps Calendarista Basic Edition.This issue affects Calendarista Basic Edition: from n/a through 3.0.5...
The vulnerability of the library for cleaning and validating jtidy’s HTML code, related to a stack overflow error, allows a malicious actor to cause a service failure.
The vulnerability of the library for cleaning and validating jtidy HTML code is related to a stack overflow error. Exploiting this vulnerability could allow an attacker to cause service interruptions...
GHSA-4M3G-6R7G-JV4F Arbitrary JavaScript execution due to using outdated libraries
Summary gradio-pdf projects with dependencies on the pdf.js library are vulnerable to CVE-2024-4367, which allows arbitrary JavaScript execution. PoC 1. Generate a pdf file with a malicious script in the fontmatrix. This will run alert‘XSS’. poc.pdf 2. Run the app. In this PoC, I've used the demo...
CVE-2024-36857
Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...
CVE-2024-25095
Insertion of Sensitive Information into Log File vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0...
aa-prepflow (>=0.1.0 <=0.1.1), agentsociety2 (>=2.0.0 <=2.2.0) +116 more potentially affected by CVE-2024-37063 via ydata-profiling (>=4.0.0 <=4.7.0)
ydata-profiling PYPI version =4.0.0, =0.1.0, =2.0.0, =0.74.0, =1.0.0, =0.1.0, =0.8.0, =0.1.2, =1.0.0, =2.0.1, =2.2.1 - classifier-toolkit =0.1.0 and more Source cves: CVE-2024-37063 Source advisory: OSV:GHSA-2R57-2MRH-GGJV...
The vulnerability of the Socket Library component in computer typesetting systems like LuaTeX, TeX Live, and MiKTeX allows attackers to execute arbitrary commands.
The vulnerability of the Socket Library component in computer typesetting systems using LuaTeX, TeX Live, and MiKTeX exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2024-36124 iq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crash
iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays. Because Snappy uses the JDK class sun.misc.Unsafe to speed up memory access, no additional bounds checks are performed and this has similar securi...
AS-DCP Lib Security Vulnerability
AS-DCP Lib is a set of APIs and command line tools to access files conforming to the sound and image track file formats developed by the SMPTE Working Group DC28.20 now TC 21DC. A security vulnerability exists in AS-DCP Lib version 2.13.1 that stems from the presence of a heap-based buffer...