WordPress Datasets Manager by Arttia Creative Plugin <= 1.5 is vulnerable to Arbitrary File Upload

Software Datasets Manager by Arttia Creative Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52375 Patch priority High CVSS severity High 10 Developer Claim ownership PSID c894c89a63d1 Credits stealthcopter Required...

WordPress Creative Blocks plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Creative Blocks versions = 1.0.1...

WordPress Creative Blocks Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Creative Blocks Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51822 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 92ca1e6db3e1 Credits Gab Required privilege Contributor...

CVE-2024-38719

CVE-2024-38719 is a real, publicly documented vulnerability affecting the WordPress plugin Creative Motion Auto Featured Image (Auto Post Thumbnail) up to version 4.1.2 . The root cause is a Missing/Incorrectly Configured Authorization that allows exploitation of access control weaknesses in the ...

CVE-2024-43122

CVE-2024-43122 describes a Missing Authorization (Broken/Incorrect Access Control) vulnerability in the Robin image optimizer WordPress plugin, affecting version 1.6.9 and earlier. The CVE notes that exploitation requires Network access with Low attack complexity and Low privileges, with potentia...

CVE-2024-43122 WordPress Robin image optimizer plugin <= 1.6.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Creative Motion Robin image optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Robin image optimizer: from n/a through 1.6.9...

CVE-2024-43260

CVE-2024-43260 refers to a Missing Authorization vulnerability in the WordPress plugin Clearfy Cache. Public sources indicate affected versions up to 2.2.4 and describe an incorrectly configured access control that could enable unauthorized access. The provided connected documents do not specify ...

PT-2024-28164 · Creative Motion · Creative Motion Auto Featured Image

Name of the Vulnerable Software and Affected Versions: Creative Motion Auto Featured Image Auto Post Thumbnail versions 4.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels...

PT-2024-28213 · Creative Motion · Creativemotion Titan Anti-Spam & Security

Name of the Vulnerable Software and Affected Versions: CreativeMotion Titan Anti-spam & Security versions n/a through 7.3.6 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: F...

PT-2024-30310 · Unknown · Creative Motion Robin

Name of the Vulnerable Software and Affected Versions: Creative Motion Robin image optimizer versions 1.6.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

Adobe Creative Cloud < 3.8.0.310 (APSB16-34)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 3.8.0.310. It is, therefore, affected by a vulnerability as referenced in the APSB16-34 advisory. - Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windo...

Adobe Creative Cloud < 4.8.0.410 Privilege Escalation (APSB19-11)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.8.0.410. It is, therefore, affected by a vulnerability as referenced in the APSB19-11 advisory. - Creative Cloud Desktop Application installer versions 4.7.0.400 and earlier have an insecure library loading dll...

Adobe Creative Cloud < 5.1 Arbitrary File Deletion (APSB20-11)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 5.1. It is, therefore, affected by a vulnerability as referenced in the APSB20-11 advisory. - Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use toctou race condition...

Adobe Creative Cloud < 4.0.0.185 Multiple Vulnerabilities (APSB17-13)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.0.0.185. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-13 advisory. - Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource...

Adobe Creative Cloud < 3.7.0.272 Multiple Vulnerabilities (APSB16-21)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 3.7.0.272. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-21 advisory. - Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272...

Adobe Creative Cloud < 4.5.5.342 Privilege Escalation (APSB18-20)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.5.5.342. It is, therefore, affected by a vulnerability as referenced in the APSB18-20 advisory. - Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijackin...

Adobe Creative Cloud < 5.2 Multiple Vulnerabilities (APSB20-33)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-33 advisory. - Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability...

CVE-2024-48795

An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48795

The CVE-2024-48795 entry concerns Creative Labs com.creative.apps.xficonnect 2.00.02, where a flaw in the firmware update process could allow a remote attacker to obtain sensitive information. Affected component: com.creative.apps.xficonnect runtime/firmware update flow. Underlying cause and exac...

CVE-2024-48795

An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process...