2270 matches found
WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Debug Log Manager versions = 2.3.1...
PT-2024-25321 · 8Theme · 8Theme Xstore Core
Name of the Vulnerable Software and Affected Versions: 8theme XStore Core versions n/a through 5.3.5 Description: The issue is related to the deserialization of untrusted data in 8theme XStore Core. This can potentially lead to security risks. No information is provided about the estimated number...
PT-2024-25425 · Zammad · Zammad
Name of the Vulnerable Software and Affected Versions: Zammad versions prior to 6.3.0 Description: An issue was discovered where the Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. This could allow an attacker to brute force these IDs and upload malicious conte...
WordPress Custom field finder plugin <= 0.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by CatFather Patchstack Alliance in WordPress Plugin Custom field finder versions = 0.3...
PT-2024-4833 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.3 iOS versions prior to 17.3 Description: The issue is related to a lack of protection for sensitive data in the Notes component of iPadOS and iOS. It may allow a remote attacker to disclose protected information...
WordPress BizPrint plugin <= 4.3.39 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin BizPrint versions = 4.3.39...
PT-2024-24555 · Unknown · Flusity-Cms
Name of the Vulnerable Software and Affected Versions: flusity CMS version 2.33 Description: An issue in the software allows a remote attacker to execute arbitrary code via the add addon.php component. Recommendations: For version 2.33, consider disabling the add addon.php component until a patch...
PT-2024-3247 · Mitel · Mitel 6900 Series +2
Name of the Vulnerable Software and Affected Versions: Mitel 6800 Series versions through 6.3 SP3 HF4 Mitel 6900 Series versions through 6.3 SP3 HF4 Mitel 6900w Series versions through 6.3.3 Mitel 6970 Conference Unit versions through 5.1.1 SP8 Description: The issue is related to an authenticati...
CVE-2024-32337
A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ADMIN LOGIN URL parameter under the Security module...
Hikvision Interactive Tablet DS-D5B86RB/B 安全漏洞
The Hikvision Interactive Tablet DS-D5B86RB/B is a 4K interactive display from Hikvision China. A security vulnerability exists in Hikvision Interactive Tablet DS-D5B86RB/B version V2.3.0 build220119, which stems from the presence of an insecure default configuration that allows an attacker to...
WordPress Ads.txt Admin plugin <= 1.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Ads.txt Admin versions = 1.3...
WordPress Plugin AppPresser 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...
WordPress The Events Calendar plugin <= 6.3.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin The Events Calendar versions = 6.3.0...
PT-2024-25993 · Netentsec · Netentsec Ns-Asg Application Security Gateway
Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3 Description: A critical vulnerability was found in the Netentsec NS-ASG Application Security Gateway. This issue affects the file /admin/add ikev2.php and is caused by the manipulation...
CVE-2024-1428
The Element Pack Elementor Addons Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementpackwrapperlink’ attribute of the Trailer Box widget in all versions up...
WordPress Gallery Exporter plugin <= 1.3 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by Abdi Prawira Negara Patchstack Alliance in WordPress Plugin WordPress Gallery Exporter versions = 1.3...
WordPress EnvíaloSimple plugin <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload vulnerability
Cross-Site Request Forgery to Arbitrary File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin EnvíaloSimple versions = 2.3...
PT-2024-18761 · Samsung · Samsung Data Store
Name of the Vulnerable Software and Affected Versions: Samsung Data Store versions prior to 5.3.00.4 Description: The issue is related to improper access control in Samsung Data Store, allowing local attackers to launch arbitrary activities with the privilege of Samsung Data Store. Recommendation...