CVE-2024-4581

CVE-2024-4581 affects the Slider Revolution WordPress plugin (versions up to and including 6.7.11). The vulnerability is a Stored XSS in the Add Layer widget caused by insufficient input sanitization and output escaping for user-supplied class, id, and title attributes. Exploitation requires an A...

CVE-2024-5422

SEH Computertechnik UTN Server PRO, UTN Server PROMAX, and INU-100 (v20.1.22 and earlier) are vulnerable to a DoS via HTTP due to uncontrolled resource consumption of file descriptors. Affected components: utnserver Pro/ProMAX/INU-100; CVE-2024-5422. Impact: availability degradation. Fixed versio...

CVE-2024-5421

CVE-2024-5421 affects SEH utnserver Pro/ProMAX/INU-100 (version 20.1.22 and earlier). Root cause: missing input validation and OS command integration in the web interface, enabling authenticated command injection. Impact: high. Remediation: update to a newer version (e.g., later than 20.1.22; som...

CVE-2024-5420

SEH utnserver Pro/ProMAX/INU-100 are affected by CVE-2024-5420 due to missing input validation in the web interface, enabling stored XSS in the device description field. The flaw affects versions including 20.1.22 and earlier; multiple sources indicate remediation via upgrading to a newer 20.1.x ...

CVE-2023-44235

CVE-2023-44235 (WP Captcha) is a vulnerability in the WordPress WP Captcha plugin (affected:

CVE-2024-4253

CVE-2024-4253 is a command injection vulnerability in the gradio-app/gradio repository, present in the test-functional.yml workflow. The issue stems from improper neutralization of special elements in a command, enabling potential modification of the base repository or exfiltration of secrets (e....

CVE-2024-36104

CVE-2024-36104 is a path traversal vulnerability in Apache OFBiz prior to 18.12.14 that can lead to remote code execution. The connected documents confirm the affected product (Apache OFBiz), vulnerable component/path handling, and the root cause is improper restriction of a pathname to a restric...

CVE-2023-40673

CVE-2023-40673 : WordPress plugin Cartpauj Register Captcha contains an improper control of interaction frequency that allows a bypass vulnerability in versions ≤ 1.0.02. The issue enables unauthenticated users to misuse the captcha functionality, described as a bypass vulnerability with low seve...

CVE-2023-40557

CVE-2023-40557 is a Content Injection (XSS) vulnerability in the WordPress plugin Tabs & Accordion (PickPlugins) affecting versions

CVE-2023-40332

CVE-2023-40332: WordPress WP-PostRatings

CVE-2023-39161

CVE-2023-39161 is a WordPress WP Discussion Board plugin vulnerability affecting versions up to 2.4.8, described as a Content Injection (XSS-related) issue in WordPress Discussion Board. The connected Patchstack entry confirms the fix in version 2.4.9. Base CVSSv3.1 score is 5.4 (Medium); impact ...

CVE-2023-38520

The CVE-2023-38520 entry documents a vulnerability in the WordPress Pinpoint Booking System plugin ≤ 2.9.9.3.4, where external control of an assumed-immutable web parameter enables functionality misuse (parameter tampering). The issue affects the Pinpoint Booking System plugin versions up to 2.9....

CVE-2023-37865

CVE-2023-37865 affects the WordPress plugin IP2Location Country Blocker (versions

CVE-2023-34001

CVE-2023-34001 concerns the WordPress plugin Hide My WP Ghost (vulnerable:

CVE-2023-33930

CVE-2023-33930 affects WordPress plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) up to version 1.5.66. The vulnerability is due to unrestricted ZIP extraction/ upload of a dangerous file type, enabling code injection. Mitigation: upgrade to 1.5.67. Patchstack reports a l...

CVE-2023-28494

CVE-2023-28494 affects WordPress plugin Contact Form Email (

CVE-2024-20887

CVE-2024-20887 affects GalaxyBudsManager PC prior to version 2.1.240315.51, where an arbitrary directory can be created. The connected sources consistently describe this vulnerability and its impact as an arbitrary directory creation, with no public exploit details provided in the documents. The ...

CVE-2024-20886

Affected software: Samsung Live Wallpaper PC. Vulnerability: Arbitrary directory creation in Samsung Live Wallpaper PC prior to version 3.3.8.0. The CVE indicates a local, low-privilege flaw with no user interaction and a high availability impact (C/I/A: none/none/high). Root cause / detail: The ...

CVE-2024-20885

CVE-2024-20885 affects Samsung Dialer prior to SMR May-2024 Release 1. The vulnerability is an improper component protection issue that allows local attackers to place a call without proper permission. Impact is described as local, with low to medium severities in provided metrics (CVSS base scor...

CVE-2024-20884

CVE-2024-20884 affects the getSemBatteryUsageStats function in BatteryStatsService. The issue is described as an incorrect use of a privileged API that could allow a local attacker to access privileged API calls. The vulnerability is associated with Samsung/Mobile platforms and is tied to the SMR...