2904 matches found
CVE-2024-43997 WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.14...
CVE-2024-49244 WordPress SV Product Import Export for WooCommerce plugin <= 1.0.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vrinsoft CSV Product Import Export for WooCommerce csv-wc-product-import-export.This issue affects CSV Product Import Export for WooCommerce: from n/a through = 1.0.0...
CVE-2024-49246
CVE-2024-49246 describes an SQL Injection vulnerability in WordPress plugin Ajax Rating with Custom Login (versions up to 1.1). The issue arises from improper neutralization of special elements in an SQL command, enabling unauthenticated SQL injection. Public references in the connected documents...
CVE-2024-48031
Cross-Site Request Forgery CSRF vulnerability in sumitsurai Featured Posts with Multiple Custom Groups FPMCG featured-posts-with-multiple-custom-groups-fpmcg allows Cross Site Request Forgery.This issue affects Featured Posts with Multiple Custom Groups FPMCG: from n/a through = 4.0...
CVE-2024-48031
CVE-2024-48031 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Featured Posts with Multiple Custom Groups (FPMCG) , version
fs/netfs/fscache_cookie: add missing "n_accesses" check
...
CVE-2024-48791
The CVE-2024-48791 issue affects com.starvedia.mCamView.zwave 5.5.1 (Plug n Play Camera). The vulnerability arises in the firmware update process, enabling a remote attacker to obtain sensitive information. The CVSSv3.1 vector indicates NETWORK access, low attack complexity, no privileges, with H...
CVE-2024-48791
An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48791
An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48775
An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48770
An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48033
CVE-2024-48033 describes a deserialization of untrusted data vulnerability enabling PHP Object Injection in the WordPress Talkback plugin (versions <= 1.0). The affected component is the Talkback secure linkback protocol, with unauthenticated access and a high-impact CVSS of 9.8 (Network, No u...
CVE-2024-48770
An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48770
CVE-2024-48770 affects com.wisdomcity.zwave 1.1.0 (Plug n Play Camera). The issue allows a remote attacker to obtain sensitive information through the firmware update process. Connected sources from multiple feeds (NVD, Red Hat, CVE listing, CNNVD, PT-Security) corroborate a vulnerability in the ...
Plug n Play Camera com.wisdomcity.zwave 安全漏洞
Plug n Play Camera com.wisdomcity.zwave is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.wisdomcity.zwave version 1.1.0, which stems from contains a vulnerability that allows remote attackers to obtain sensitive information through the firmware update...
PT-2024-33211 · Unknown · Plug N Play Camera
Name of the Vulnerable Software and Affected Versions: Plug n Play Camera com.ezset.delaney version 1.2.0 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.2.0, update the firmware to a version that...
CVE-2024-48770
An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48775
An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48775
CVE-2024-48775 affects Plug n Play Camera com.ezset.delaney 1.2.0. The issue, triggered during the firmware update process, may allow a remote attacker over the network to obtain sensitive information (confidentiality impact High; no integrity/availability impact reported). The vulnerability is d...