266444 matches found
CVE-2023-49755 WordPress Elementor Timeline Widget plugin <= 2.2 - Notice Dismissal Vulnerability
Missing Authorization vulnerability in Satinder Singh Elementor Timeline Widget 3r-elementor-timeline-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Timeline Widget: from n/a through = 2.2...
CVE-2023-49755 WordPress Elementor Timeline Widget plugin <= 2.2 - Notice Dismissal Vulnerability
Missing Authorization vulnerability in B.M. Rafiul Alam Elementor Timeline Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Timeline Widget: from n/a through 2.2...
WordPress plugin Elementor Timeline Widget 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2023-49755: Missing Authorization
Missing Authorization vulnerability in B.M. Rafiul Alam Elementor Timeline Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Timeline Widget: from n/a through 2.2...
PT-2024-13792
Name of the Vulnerable Software and Affected Versions Elementor Timeline Widget versions prior to 2.2 Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations For versions prior to 2.2...
CVE-2024-11799
creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1625/ 2024-11-28 00:12:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113557685648826835 2024-12-03 11:00:00+00:00| seen|...
CVE-2023-52333
creationtimestamp| type| source ---|---|--- 2024-11-22 20:57:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113528607479224384...
CVE-2024-41779
creationtimestamp| type| source ---|---|--- 2024-11-22 12:05:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113526515572495284 2024-11-23 10:27:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113531791115889914 2024-11-27 07:55:46+00:00| seen|...
SEH utnserver Pro 20.1.22 Cross Site Scripting
St. Pölten UAS 20241118-0 ------------------------------------------------------------------------------- title| Multiple Stored Cross-Site Scripting product| SEH utnserver Pro vulnerable version| 20.1.22 fixed version| 20.1.35 CVE number| CVE-2024-11304 impact| High homepage|...
CVE-2024-11680
creationtimestamp| type| source ---|---|--- 2024-11-21 17:59:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsendunauthrce.rb 2024-11-26 09:58:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113548665618022004 2024-11-27...
Security Bulletin: IBM Global Availability Mailbox is affected by a Bouncy Castle vulnerability that could allow a remote attacker to obtain sensitive information (CVE-2023-33201)
Summary IBM Global Availability Mailbox is affected by the Bouncy Castle Crypto Package For Java bc-java it could allow a remote attacker to obtain sensitive information, caused by not validating the X.500 name of any certificate in the implementation of the X509LDAPCertStoreSpi.java class. By...
CVE-2022-23961
creationtimestamp| type| source ---|---|--- 2024-11-18 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-18 2025-01-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-28 2025-01-29 00:00:00+00:00| exploited| The Shadowserver...
CVE-2024-11734
creationtimestamp| type| source ---|---|--- 2024-11-16 15:59:00+00:00| seen| https://bugzilla.redhat.com/showbug.cgi?id=2328846 2025-01-14 08:38:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113825801162950648 2025-01-14 09:10:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14...
firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill)
A remote code execution vulnerability was found in Firefox and Thunderbird. The Mozilla Foundation Security Advisories state: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines...
PT-2024-41057 · Unknown · Qbittorrent
Name of the Vulnerable Software and Affected Versions: qBittorrent affected versions not specified Description: The issue concerns the failure to verify SSL certificates in the DownloadManager class. Specifically, if the verification of a certificate failed, the application would log an error and...
CVE-2020-7796
creationtimestamp| type| source ---|---|--- 2024-11-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-09 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-17 00:00:00+00:00| exploited| The Shadowserver...
CVE-2024-50078
creationtimestamp| type| source ---|---|--- 2024-10-29 03:03:55+00:00| seen| https://t.me/cvedetector/9241...
RLSA-2024:8025 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...
RockyLinux 8 : thunderbird (RLSA-2024:8024)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8024 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the RockyLin...
Updated firefox packages fix security vulnerabilities
The updated package provides Firefox 128 for all mandatory arches of Mageia x8664, i586 and aarch64, fixing several bugs, including security vulnerabilities, for i586 and aarch64: Fullscreen notification dialog can be obscured by document content. CVE-2024-7518 Out of bounds memory access in...