2299 matches found
CVE-2024-11413 HostFact bestelformulier integratie <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The HostFact bestelformulier integratie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bestelformulier' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2024-11430
CVE-2024-11430 affects the SQL Chart Builder WordPress plugin. Affected component: gv n_schart_2 shortcode arg1 parameter; root cause is insufficient escaping and poor query preparation, enabling SQL Injection. Impact: with Contributor+ authentication, an attacker can append additional SQL to exi...
Apple macOS 安全漏洞
Apple macOS is a set of specialized operating systems developed for Mac computers by the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.2. An attacker exploiting the vulnerability could gain access to a user's Keychain project...
CVE-2024-52537
Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
Oracle Siebel Server (July 2020 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory. - Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI, SWSE Apache Tomcat. Supported versions that are affected are...
CVE-2024-54922
A SQL Injection was found in /admin/edituser.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the firstname, lastname, and username parameters...
CVE-2024-12026 Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) New Filter Creation
The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveFilter function in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with Subscriber-level access...
CVE-2024-50402
CVE-2024-50402 describes a use of externally-controlled format string vulnerability affecting QNAP QTS and QuTS hero. Affected versions include QTS 5.1.9.2954 build 20241120 and later, QTS 5.2.2.2950 build 20241114 and later, QuTS hero h5.1.9.2954 build 20241120 and later, and QuTS hero h5.2.2.29...
CVE-2024-10578
CVE-2024-10578 – Pubnews theme (WordPress) has an unauthenticated/arbitrary plugin installation vulnerability through a missing capability check in pubnews_importer_plugin_action_for_notice() across all versions up to 1.0.7. The issue allows authenticated attackers with Subscriber-level access an...
CVE-2024-45841
Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained...
Vulnerability of TCP components of Linux operating system’s kernel, allowing attackers to cause service failures
The vulnerability of TCP components in Linux operating systems is related to the operation of data out of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
ABB ASPECT 安全漏洞
ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT suffers from a security vulnerability that originates from the inclusion of a Use Default Credentials vulnerability in ASPECT on Linux. An attacker could exploit this vulnerability to gain...
Vulnerability of components of Linux kernel’s IB/hfi1 module, allowing attackers to access confidential information
The vulnerability of the IB/hfi1 components in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
The vulnerability of the virtual learning environment Moodle, related to the storage of critical information in an open manner, allows a perpetrator to gain access to confidential information.
The vulnerability of the virtual learning environment Moodle is related to the storage of critical information in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...
PT-2024-34176 · Qnap · Qnap Qts +1
Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.1.2930 build 20241025 QNAP QuTS hero versions prior to h5.2.1.2929 build 20241025 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system...
The vulnerability of the btrfs component in the Linux operating system’s kernel allows a hacker to gain access to confidential information.
The vulnerability of the btrfs component in the Linux operating system’s kernel is related to the disclosure of information within the initdatacontainer function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
The vulnerability of the kernel component of the Linux operating system, which allows a hacker to gain access to confidential information
The vulnerability of the kernel component of the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
The vulnerability of the accel/ivpu components in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the accel/ivpu components in the Linux operating system’s kernel is related to improper locking of resources in the ivpudevinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Google Android 安全漏洞
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek component bootloader. An attacker can exploit this vulnerability to achieve elevation of privilege...