10688 matches found
CVE-2024-49574 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module...
CVE-2024-49574
Affected software: ManageEngine ADAudit Plus. Versions below build 8123 are vulnerable to a SQL injection flaw in the reports module. Root cause: improper handling of SQL queries in the reports component leading to injection. Impact: high confidentiality and integrity impact; partial availability...
ZOHO ManageEngine ADAudit Plus 安全漏洞
ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to version 8123 that stems from the presence of a SQL injection vulnerability...
Security Bulletin: Due to the package jsonpath-plus, IBM Event Streams is vulnerable to Remote Code Execution
Summary jsonpath-plus is used by IBM Event Streams as part of the UI. Vulnerability Details CVEID:CVE-2024-21534 DESCRIPTION: Versions of the package jsonpath-plus before 10.0.0 are vulnerable to Remote Code Execution RCE due to improper input sanitization. An attacker can execute aribitrary code...
CVE-2024-51659
CVE-2024-51659 describes a CSRF to Stored XSS vulnerability in the WordPress plugin Twitter @Anywhere Plus ( GeekRMX ) affecting versions up to and including 2.0. The CVE entry notes a CVSS v3.1 base score of 7.1 (HIGH) with network attack vector, user interaction required, and scope changed. The...
WordPress plugin Twitter @Anywhere Plus 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...
PT-2024-34803 · Geekrmx · Geekrmx Twitter @Anywhere Plus
Name of the Vulnerable Software and Affected Versions: GeekRMX Twitter @Anywhere Plus versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that can lead to Stored XSS. This problem affects GeekRMX Twitter @Anywhere Plus, allowing for potential malicio...
Exploit for CVE-2024-21534
CVE-2024-21534: Remote Code Execution Vulnerability in jsonpa...
CVE-2024-11126
A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic. Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of excessive authentication attempts. The complexity of an attack is rather high. The...
CVE-2024-11126
CVE-2024-11126 affects Digistar AG-30 Plus 2.6b, specifically the Login Page component. The root issue is an improper restriction of excessive authentication attempts, as described across multiple sources. Impact is described as limited to authentication abuse with low CVSS scores (low severity) ...
CVE-2024-11126 Digistar AG-30 Plus Login Page excessive authentication
A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic. Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of excessive authentication attempts. The complexity of an attack is rather high. The...
CVE-2024-11126 Digistar AG-30 Plus Login Page excessive authentication
A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic. Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of excessive authentication attempts. The complexity of an attack is rather high. The...
Digistar AG-30 Plus 安全漏洞
Digistar AG-30 Plus is an access gateway from Digistar that integrates a specialized router to allow communication between IP and digital technologies in a simple and secure manner. A security vulnerability exists in Digistar AG-30 Plus version 2.6b that stems from an improper restriction of...
WordPress WP Photo Album Plus plugin <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay vulnerability
Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin WP Photo Album Plus versions = 8.8.08.007...
WordPress WP Photo Album Plus Plugin <= 8.8.08.007 is vulnerable to Broken Access Control
Software WP Photo Album Plus Type Plugin Vulnerable versions = 8.8.08.007 Fixed in 8.9.01.001 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-10958 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d60c5fd2604a Credits Arkadiusz...
Exploit for Code Injection in Wppa Wp_Photo_Album_Plus
WordPress WP Photo Album Plus Arbitrary Shortcode Execution...
CVE-2024-10958
The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value...
CVE-2024-10958 WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay
The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value...
WordPress plugin The WP Photo Album Plus 代码注入漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Give is a fundraising platform plugin used in it.WordPress plugin is an application...
