264 matches found
MAL-2024-1718 Malicious code in accessibility-nav (npm)
--- -= Per source details. Do not edit below this line.=-...
WordPress Elespare plugin <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Horizontal Nav Menu Widget vulnerability discovered by stealthcopter in WordPress Plugin Elespare versions = 3.1.2...
CVE-2024-4615
The Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Horizontal Nav Menu' widget in all versions up to, and...
PT-2024-29756 · WordPress · Themesflat Addons For Elementor
Name of the Vulnerable Software and Affected Versions: Themesflat Addons For Elementor plugin for WordPress versions up to, and including, 2.1.1 Description: The issue is related to Stored Cross-Site Scripting in the Themesflat Addons For Elementor plugin for WordPress. This is due to insufficien...
PT-2024-25907 · Twonav · Twonav
Name of the Vulnerable Software and Affected Versions: TwoNav version 2.1.13 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. This vulnerability can be exploited via the url parameter to the API endpoint "index.php?c=api&method=read data&type=connectivity...
CVE-2024-33832
OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery SSRF via the component /index.php?c=api&method=getlinkinfo...
WordPress Theme Networker 安全漏洞
WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL.WordPress theme is a theme for WordPress. A security vulnerability exists in WordPress Theme Networker 1.1.9 and earlier versions, which stems...
PT-2024-20809 · Open Robotics · Ros2 +1
Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions Description: A NULL pointer dereference issue was discovered via the isCurrent function at /src/layered costmap.cpp. This issue affects the navigation capabilities of the...
PT-2024-20811 · Open Robotics · Ros2 +1
Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description: The issue is related to an inappropriate pointer order of map sub and map freemap in the amcl node.cpp file, leading to a use-after-free. Recommendations: For...
CVE-2024-21380
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...
Information disclosure
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...
CVE-2024-21380
CVE-2024-21380 is a Microsoft Dynamics 365 Business Central/NAV information disclosure vulnerability. The CVSS v3.1 score is 8.0 (Network, high attack complexity; privileges required: Low; user interaction required; changed scope). It can lead to access to sensitive data and potential data integr...
CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
...
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
...
Cross-Site Request Forgery in JFinalCMS via /admin/nav/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/save...
Cross-Site Request Forgery in JFinalCMS via /admin/nav/update
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...
Cross-Site Request Forgery in JFinalCMS via admin/nav/delete
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/nav/delete...
GHSA-HV4C-V8J8-54CW Cross-Site Request Forgery in JFinalCMS via /admin/nav/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/save...
