659 matches found
PT-2024-24276 · Ibm · Ibm Planning Analytics Local
Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...
PT-2024-40525 · Silverstripe · Silverstripe/Subsites
Name of the Vulnerable Software and Affected Versions: silverstripe/subsites versions prior to 2.1.1 Description: A potential SQL injection issue has been identified in the silverstripe/subsites module. The issue has been fixed in version 2.1.1. Recommendations: For versions prior to 2.1.1, updat...
PT-2024-35790 · Unknown · Phpgurukul Zoo Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue affects the processing of the file /admin/normal-bwdates-reports-details.php, where the manipulation of the fromdate argument leads to SQL injection. The attack can be...
WordPress plugin Clearfy Cache 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
IIntel Context Sensing Technology 安全漏洞
Intel Context Sensing Technology is a group of technologies from Intel Corporation USA that allow devices to understand and adapt to contextual information about their surroundings to provide a more intelligent and personalized user experience. A security vulnerability previously existed in Intel...
PT-2024-25868 · Unknown · Pk Favicon Manager
Name of the Vulnerable Software and Affected Versions: Pk Favicon Manager versions n/a through 2.1 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Pk Favicon Manager. Recommendations: For versions n/a through 2.1, update to a version that...
WordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Roby Firnando Yusuf in WordPress Plugin Pk Favicon Manager versions = 2.1...
CVE-2024-3895
The WP Datepicker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpdpaddnewdatepickerajax function in all versions up to, and including, 2.1.0. This makes it possible for authenticated attackers, with subscriber-level access and...
SUSE CVE-2024-34020
A stack-based buffer overflow was found in the putSDN function of mail.c in hcode through 2.1...
WordPress SharkDropship and Affiliate for AliExpress, eBay, Amazon, Etsy plugin <= 2.1.1 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by Emili Castells Patchstack Alliance in WordPress Plugin Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy versions = 2.1.1...
oFono 安全漏洞
oFono is an open source telephony communication framework open-sourced by UBports. A security vulnerability exists in oFono versions prior to 2.1, which stems from a stack overflow error triggered by the decodedeliverreport function during SMS decoding...
WordPress Plugin coreActivity 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in WordPre...
CVE-2024-32343
A cross-site scripting XSS vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter...
PT-2024-24353 · Winter Cms · Wn-Dusk-Plugin
Name of the Vulnerable Software and Affected Versions: wn-dusk-plugin versions prior to 2.1.0 Description: The Dusk plugin provides special routes as part of its testing framework, allowing a browser environment to act as a user in the Backend or User plugin without authentication. The route URL/...
WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin ELEX WooCommerce Dynamic Pricing and Discounts versions = 2.1.2...
AZL-39004 CVE-2023-45288 affecting package helm for versions less than 3.15.2-1
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
PT-2024-23448 · Wpbakery · Labib Ahmed Carousel Anything
Name of the Vulnerable Software and Affected Versions: Labib Ahmed Carousel Anything For WPBakery Page Builder versions through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This...
UBUNTU-CVE-2024-1742
Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows the extraction of this information from the process list...
PT-2024-22725 · WordPress · Timersys Wp Popups
Name of the Vulnerable Software and Affected Versions: Timersys WP Popups versions n/a through 2.1.5.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject...