141 matches found
WordPress plugin ShopLentor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin... A cross-site scripting...
PT-2024-38417 · Red Hat · Openshift Ai
Name of the Vulnerable Software and Affected Versions: OpenShift AI versions prior to 2.9 Description: A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the...
Camaleon CMS Directory Traversal CVE-2024-46987
Exploits CVE-2024-46987, an authenticated directory traversal vulnerability in Camaleon CMS versions use auxiliary/gather/camaleon/downloadprivatefile msf undefineddownloadprivatefile show actions ...actions... msf undefineddownloadprivatefile set ACTION msf undefineddownloadprivatefile show...
WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme ListingPro versions = 2.9.4...
WordPress plugin Sublanguage security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
UBUNTU-CVE-2023-49441
dnsmasq 2.9 is vulnerable to Integer Overflow via forwardquery...
WordPress plugin Captcha Code 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...
WordPress Awesome Contact Form7 for Elementor plugin <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via AEP Contact Form 7 Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via AEP Contact Form 7 Widget vulnerability discovered by stealthcopter in WordPress Plugin Awesome Contact Form7 for Elementor versions = 2.9...
PT-2024-5352 · Argo Cd · Argo Cd
Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 2.11.3 Argo CD versions prior to 2.10.12 Argo CD versions prior to 2.9.17 Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It’s possible for authenticated users to enumerate...
Intel FPGA products 安全漏洞
Intel FPGA products is a family of software applications from Intel Corporation USA. A security vulnerability exists in Intel FPGA products prior to version 2.9.1 that stems from an incorrect input validation issue. A denial of service attack may be allowed...
CVE-2024-3407
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
Tormach PathPilot Controller 安全漏洞
Tormach PathPilot Controller is a series of controllers from Tormach USA. A security vulnerability exists in Tormach PathPilot Controller version v2.9.6. An attacker exploited the vulnerability to erase critical sectors of flash memory, causing the machine to lose network connectivity and suffer...
Tormach PathPilot Controller 安全漏洞
Tormach PathPilot Controller is a series of controllers from Tormach USA. A security vulnerability exists in Tormach PathPilot Controller version v2.9.6. An attacker exploiting this vulnerability could overwrite a hard-coded IP address in the device's memory, thereby disrupting the network...
HTMLy 安全漏洞
HTMLy is a PHP-based open source blogging platform. A security vulnerability exists in HTMLy version v2.9.5, which stems from the presence of a stored cross-site scripting XSS vulnerability. An attacker can exploit the vulnerability to execute arbitrary web script or HTML code by injecting a...
PT-2024-23907 · Unknown · Aerin Loan Repayment Calculator/Application Form
Name of the Vulnerable Software and Affected Versions: aerin Loan Repayment Calculator and Application Form versions 2.9.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintende...
AZL-43177 CVE-2024-1984 affecting package graphene 1.10.4-3
The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generated source...
CVE-2024-30524
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedLettuce Plugins PDF Viewer for Elementor allows Stored XSS.This issue affects PDF Viewer for Elementor: from n/a through 2.9.3...
PT-2024-21975 · Dotclear · Dotclear
Name of the Vulnerable Software and Affected Versions: Dotclear version 2.29 Description: A Reflected Cross-Site Scripting XSS issue has been identified in the Search functionality of the Admin Panel. Recommendations: For Dotclear version 2.29, consider disabling the Search functionality within t...
PT-2024-18274 · Unknown · Bdtask Bhojon Best Restaurant Management
Name of the Vulnerable Software and Affected Versions: Bdtask Bhojon Best Restaurant Management Software version 2.9 Description: A problematic issue has been found in the software, affecting the processing of the file /dashboard/message of the component Message Page. The manipulation of the...