CVE-2024-10079

CVE-2024-10079 refers to WP Easy Post Types for WordPress (

Denial Of Service (DoS)

The System.IO.Packaging library is vulnerable to Denial Of Service DoS. The vulnerability is due to the inadequate validation of untrusted inputs by the System.IO.Packaging library, allowing attackers to exploit complex operations and exhaust system resources...

D-Link DIR-820L Buffer Overflow Vulnerability (CNVD-2024-41037)

The D-Link DIR-820L is a dual-band wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-820L version 1.05B03, which originates from a boundary error in the sub451208 function when handling untrusted input. A remote attacker could exploit this...

D-Link DCS-960L Buffer Overflow Vulnerability

D-Link DCS-960L is a webcam product from China AUO D-Link. A buffer overflow vulnerability exists in the D-Link DCS-960L version 1.09, which originates from a boundary error in the sub402280 function when handling untrusted input. An attacker can exploit the vulnerability to execute arbitrary cod...

CVE-2024-9634

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input from the givecompanyname parameter. This makes it possible for unauthenticated attackers to inject a...

CVE-2024-9634

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input from the givecompanyname parameter. This makes it possible for unauthenticated attackers to inject a...

PT-2024-39667 · Vue · Vue

Name of the Vulnerable Software and Affected Versions: Vue affected versions not specified Description: The issue is related to an improper regular expression in Vue's parseHTML function, which can lead to a potential regular expression denial of service vulnerability. This flaw, known as a ReDoS...

dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList

A flaw was found in dotnet. The System.IO.Packaging library may allow untrusted inputs to influence algorithmically complex operations, resulting in a denial of service...

D-Link DIR-820L 安全漏洞

The D-Link DIR-820L is a dual-band wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-820L version 1.05B03, which originates from a boundary error in the sub451208 function when handling untrusted input. A remote attacker could exploit this...

D-Link COVR-2600R Buffer Overflow Vulnerability

The D-Link COVR-2600R is a wireless router from China-based AUO D-Link. The D-Link COVR-2600R suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

CentOS 6 : chromium-browser (RHSA-2020:3723)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3723 advisory. - Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a...

CentOS 6 : chromium-browser (RHSA-2020:2544)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2544 advisory. - Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to...

PT-2024-39460 · WordPress · Ti Woocommerce Wishlist

Name of the Vulnerable Software and Affected Versions: TI WooCommerce Wishlist WordPress plugin versions 2.8.2 and earlier Description: The issue is related to SQL Injection due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

CVE-2024-21532

All versions of the package ggit are vulnerable to Command Injection via the fetchTagsbranch API, which allows user input to specify the branch to be fetched and then concatenates this string along with a git command which is then passed to the unsafe exec Node.js child process API...

PT-2024-18947 · Ggit · Ggit

Name of the Vulnerable Software and Affected Versions: ggit versions all Description: The issue concerns Arbitrary Argument Injection via the clone API. This API allows specifying the remote URL to clone and the file on disk to clone to. However, the library fails to sanitize user input or valida...

D-Link COVR-2600R 安全漏洞

The D-Link COVR-2600R is a wireless router from China-based AUO D-Link. The D-Link COVR-2600R suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

CVE-2024-9314 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.228 via deserialization of untrusted input 'setredirections' function. This makes it possible for authenticated attackers, with...

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

GHSA-78WR-2P64-HPWJ Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

CVE-2024-7433 Empowerment <= 1.0.2 - Authenticated (Contributor+) PHP Object Injection

The Empowerment theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.2 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is...