CVE-2024-0083

NVIDIA ChatRTX for Windows is affected by a UI-based cross-site scripting vulnerability (CVE-2024-0083) that can be triggered by network-delivered malicious scripts. The issue affects version 0.2 and earlier; exploitation could lead to code execution, denial of service, and information disclosure...

CVE-2024-1752

The Font Farsi WordPress plugin (versions 1.6.6 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitize and escape certain plugin settings, which allows high-privilege users, such as administrators, to perform XSS attacks. This vulnerability pe...

CVE-2024-1956

The wpb-show-core WordPress plugin versions before 2.7 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to sanitise and escape parameters before outputting them in the response to an unauthenticated request . An exploit example is provided, demo...

CVE-2024-1958

The WPB Show Core WordPress plugin versions prior to 2.7 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly sanitise and escape a parameter before outputting it back onto the page. This flaw could be exploited against high privilege us...

CVE-2024-1588

The SendPress Newsletters WordPress plugin (versions Advanced . This allows high-privilege users, such as administrators, to execute arbitrary scripts. A practical exploit involves injecting a payload like "/> into the Optional Settings of the 'Read More override' parameter and saving the con...

CVE-2024-1292

The WPB Show Core WordPress plugin in versions prior to 2.7 is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain parameters before outputting them back to the page. An attacker could exploit this to target high-privilege use...

CVE-2024-1589

The SendPress Newsletters WordPress plugin (versions into these fields, which will then execute in the browser of other users. Exploitation details are provided in the documentation, demonstrating successful execution of a JavaScript payload.

CVE-2024-2444

The Inline Related Posts WordPress plugin before 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2023-5973

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display...

Truncated port name (CVE-2023-5973)

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display. Note: The vulnerability doesn...

CVE-2023-38729

CVE-2023-38729 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) across multiple releases. The vulnerability enables sensitive information disclosure when using ADMIN_CMD with IMPORT or EXPORT. Affected versions include Db2 10.5, 11.1, and 11.5; exploitation details are t...

CVE-2024-27254

CVE-2024-27254 affects IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data (versions in the 3.0/4.x line as listed in the remediation table) with a denial-of-service condition from a specially crafted query. The connected Red Hat entry confirms the vulnerability details and scop...

CVE-2024-24707

Cwicly WordPress plugin vulnerable to authenticated Remote Code Execution (RCE) via improper control of code generation. Affected versions:

CVE-2024-25096

CVE-2024-25096 concerns the WordPress Canto plugin. Affected: Canto

CVE-2024-27972

The WP Fusion Lite WordPress plugin (versions 3.41.24 and earlier ) is vulnerable to a Command Injection (Improper Control of Generation of Code) vulnerability. This flaw allows an attacker with Contributor privileges to execute arbitrary commands on the server. To remediate this issue, users sho...

CVE-2024-30173

CVE-2024-30173 maps to an authentication bypass in the TYPO3 OpenID Connect Authentication extension. The TYPO3 extension’s authentication service does not verify the OpenID Connect authentication state from the user lookup chain and instead authenticates every valid frontend user whose tx_oidc f...

GHSA-GP8G-F42F-95Q2 ZITADEL's actions can overload reserved claims

Impact Under certain circumstances an action could set reserved claims managed by ZITADEL. For example it would be possible to set the claim urn:zitadel:iam:user:resourceowner:name json "urn:zitadel:iam:user:resourceowner:name": "ACME" if it was not set by ZITADEL itself. To compensate for this w...

ZITADEL's actions can overload reserved claims

Impact Under certain circumstances an action could set reserved claims managed by ZITADEL. For example it would be possible to set the claim urn:zitadel:iam:user:resourceowner:name json "urn:zitadel:iam:user:resourceowner:name": "ACME" if it was not set by ZITADEL itself. To compensate for this w...

CVE-2024-29892

ZITADEL, open source authentication management software, uses Go templates to render the login UI. Under certain circumstances an action could set reserved claims managed by ZITADEL. For example it would be possible to set the claim urn:zitadel:iam:user:resourceowner:name. To compensate for this ...

CVE-2024-29892 ZITADEL's actions can overload reserved claims

ZITADEL, open source authentication management software, uses Go templates to render the login UI. Under certain circumstances an action could set reserved claims managed by ZITADEL. For example it would be possible to set the claim urn:zitadel:iam:user:resourceowner:name. To compensate for this ...