4301 matches found
WordPress Jetpack Plugin < 13.9.1 is vulnerable to Broken Access Control
Software Jetpack Type Plugin Vulnerable versions 13.9.1 Fixed in 13.9.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9926 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 675e1d99d774 Credits Marc Montpas Required privilege...
WordPress CSV Product Import Export for WooCommerce Plugin <= 1.0.0 is vulnerable to SQL Injection
Software CSV Product Import Export for WooCommerce Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-49244 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 62295a347894 Credits Hakiduck Required...
WordPress CJ Change Howdy Plugin <= 3.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software CJ Change Howdy Type Plugin Vulnerable versions = 3.3.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49223 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d1b937179167 Credits SOPROBRO Requir...
WordPress Linked Variation for WooCommerce Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)
Software Linked Variation for WooCommerce Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-48047 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 314234821b77 Credits Marek Mikita...
WordPress Azz Anonim Posting Plugin <= 0.9 is vulnerable to Arbitrary File Upload
Software Azz Anonim Posting Type Plugin Vulnerable versions = 0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49257 Patch priority High CVSS severity High 10 Developer Claim ownership PSID a0f84f528406 Credits stealthcopter Required privilege...
WordPress Htaccess File Editor Plugin <= 1.0.18 is vulnerable to Broken Access Control
Software Htaccess File Editor Type Plugin Vulnerable versions = 1.0.18 Fixed in 1.0.19 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-49256 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d6dd94150ebc Credits savphill Require...
CVE-2024-9903
creationtimestamp| type| source ---|---|--- 2024-10-13 02:11:50+00:00| seen| https://t.me/cvedetector/7776 2024-10-13 14:10:43+00:00| seen| https://t.me/HackerArsenal/545...
October CMS Cross-Site Scripting Vulnerability
October CMS is a set of October CMS company based on PHP and Laravel Web application framework for open source content management system CMS. A cross-site scripting vulnerability exists in October CMS version 3.6.30. The vulnerability stems from the application's lack of effective filtering and...
CVE-2024-48787
creationtimestamp| type| source ---|---|--- 2024-10-11 22:54:36+00:00| seen| https://t.me/cvedetector/7734...
CVE-2024-48937
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...
CVE-2024-44414
creationtimestamp| type| source ---|---|--- 2024-10-11 19:33:31+00:00| seen| https://t.me/cvedetector/7718...
CVE-2024-47505
creationtimestamp| type| source ---|---|--- 2024-10-11 18:42:41+00:00| seen| https://t.me/cvedetector/7697 2024-10-11 18:42:57+00:00| seen| https://t.me/cvedetector/7703 2024-10-11 18:42:58+00:00| seen| https://t.me/cvedetector/7704...
CVE-2024-47875
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3...
Akamai’s Perspective on October’s Patch Tuesday 2024
...
CVE-2024-9717
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1377/...
CVE-2024-9716
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1375/...
CVE-2024-9719
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1379/...
CVE-2024-9730
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1381/...