CVE-2024-32779

Technical details (affected product/version, root cause, exploit information, remediation) are not publicly provided in the supplied documents. The CVE-2024-32779 entry notes a Missing Authorization issue in Vision Interactive up to 1.7.1, but no technical specifics or fixes are included here; mo...

WordPress plugin Vision Interactive security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress WpTravelly plugin <= 1.7.1 - Missing Authorization via ttbm_new_place_save vulnerability

Missing Authorization via ttbmnewplacesave vulnerability discovered by Francesco Carlucci in WordPress Plugin WpTravelly versions = 1.7.1...

WordPress plugin EPROLO Dropshipping 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-25342 · Eprolo · Eprolo Dropshipping

Name of the Vulnerable Software and Affected Versions: EPROLO Dropshipping versions through 1.7.1 Description: A Missing Authorization issue has been identified. This issue affects EPROLO Dropshipping, allowing potential unauthorized access. Recommendations: Update to a version later than 1.7.1 t...

Security Bulletin: IBM WebSphere Automation is vulnerable to cross-site scripting (CVE-2024-28775)

Summary IBM WebSphere Automation is vulnerable to cross-site scripting. Vulnerability Details CVEID:CVE-2024-28775 DESCRIPTION: IBM WebSphere Automation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend...

WordPress Breakdance Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Breakdance Type Plugin Vulnerable versions = 1.7.0 Fixed in 1.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-6854 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0b7ea50f2b37 Credits Francesco Carlucci Required privilege...

PT-2024-23484 · Dd Rating · Dd Rating

Name of the Vulnerable Software and Affected Versions: DD Rating versions 1.7.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Stored XSS. Recommendations: For DD...

CVE-2024-25849

In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in PrestaShop Make an offer 1.7.1 and prior versions, which stems from the presence of...

Security Advisory 0091

Security Advisory 0091 . CSAF PDF Date: February 20, 2024 Revision | Date | Changes ---|---|--- 1.0 | February 20, 2024 | Initial release The CVE-ID tracking this issue: CVE-2023-6068 CVSSv3.1 Base Score: 3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Common Weakness Enumeration: CWE-283 Improper Access...

WordPress Add Customer for WooCommerce Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)

Software Add Customer for WooCommerce Type Plugin Vulnerable versions = 1.7 Fixed in 1.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24841 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3853371ad529 Credits Dhabaleshwar Das Required...

PT-2023-31924 · WordPress · Wp Zinc Page Generator

Name of the Vulnerable Software and Affected Versions: WP Zinc Page Generator versions 1.7.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecti...

WordPress Page Generator Plugin <= 1.7.1 is vulnerable to SQL Injection

Software Page Generator Type Plugin Vulnerable versions = 1.7.1 Fixed in 1.7.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-52131 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 8554eec9dec0 Credits Muhammad Daffa Required privilege Administrator...

UBUNTU-CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

CVE-2023-50246 jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

PT-2023-8957 · Jq +1 · Jq +1

Name of the Vulnerable Software and Affected Versions: jq version 1.7 Description: The issue is related to a heap-based buffer overflow in the jq command-line JSON processor. This can potentially allow an attacker to cause a denial of service. Recommendations: For version 1.7, update to version...

CVE-2023-47854

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Howard Ehrenberg Parallax Image allows Stored XSS.This issue affects Parallax Image: from n/a through 1.7.1...

CVE-2023-47854

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Howard Ehrenberg Parallax Image allows Stored XSS.This issue affects Parallax Image: from n/a through 1.7.1...

PT-2023-30648 · Unknown · Parallax Image

Name of the Vulnerable Software and Affected Versions: Parallax Image versions 1.7.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...