11748 matches found
changedetection.io security vulnerability
changedetection.io is a website change detection, monitoring and notification application by dgtlmoon individual developer. A security vulnerability exists in changedetection.io that stems from improper input validation...
IBM Cloud Pak for Multicloud Management Deserialization Command Execution
The vulnerability of the monitoring, control, automation, and management tool for IBM Cloud Pak for Multicloud Management lies in the shortcomings of the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafted...
CVE-2024-53159
In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775-core Fix overflows seen when writing limit attributes DIVROUNDCLOSEST after kstrtoul results in an overflow if a large number such as 18446744073709551615 is provided by the user. Fix it by reordering clampval and...
CVE-2024-12814
creationtimestamp| type| source ---|---|--- 2024-12-24 07:05:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113706528430346312 2024-12-24 07:15:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzvkbckwp2k 2024-12-24 09:23:07+00:00| seen|...
CVE-2024-11808 Pingmeter Uptime Monitoring <= 1.0.3 - Reflected Cross-Site Scripting
The Pingmeter Uptime Monitoring plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpnonce' parameter in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-11808
CVE-2024-11808 (Pingmeter Uptime Monitoring, WordPress) is a reflected XSS vulnerability in the Pingmeter Uptime Monitoring plugin for WordPress through the _wpnonce parameter, affecting all versions up to 1.0.3. The authenticated/unauthenticated risk is described as an attacker tricking a user i...
WordPress plugin Pingmeter Uptime Monitoring has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2024-17264 · WordPress · Pingmeter Uptime Monitoring
Name of the Vulnerable Software and Affected Versions: Pingmeter Uptime Monitoring plugin for WordPress versions up to, and including, 1.0.3 Description: The issue is related to Reflected Cross-Site Scripting via the wpnonce parameter due to insufficient input sanitization and output escaping. Th...
CVE-2024-11808: Improper Neutralization of Input During Web Page Generation
The Pingmeter Uptime Monitoring plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpnonce' parameter in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
WordPress Pingmeter Uptime Monitoring plugin <= 1.0.3 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Pingmeter Uptime Monitoring versions = 1.0.3...
CVE-2024-56349
creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576577778407 2024-12-20 15:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoj2ymkh2s 2024-12-20 16:44:55+00:00| seen|...
CVE-2024-11783
creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptoyawkf2m 2024-12-20 07:20:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683939071218514 2024-12-20 09:13:23+00:00| seen|...
LLM Evaluations Data Compromise
The vulnerability of the “Evaluations” function in the platform for monitoring, managing, and improving LLM applications involves bypassing authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely influence the integrity of protected information ...
GHSA-W32M-9786-JP63 vulnerabilities
Vulnerabilities for packages: aws-network-policy-agent, cosign-fips, apache-beam-python-3.11-sdk, k8ssandra-client-fips, sftpgo-plugin-eventsearch, cass-operator-fips-no-pvc-delete, amazon-cloudwatch-agent-operator-fips, prometheus-node-exporter-fips, rabbitmq-messaging-topology-operator,...
PT-2024-9675
Name of the Vulnerable Software and Affected Versions Fortinet FortiWLM versions 8.5.0 through 8.5.4 Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description A relative path traversal vulnerability in Fortinet FortiWLM allows an attacker to execute unauthorized code or commands via specially...
BIT-NODE-MIN-2023-30582
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...
ROS-20241216-06
A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...
ROS-20241216-03
A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...
ROS-20241216-05
A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...