WordPress Ultimate Bootstrap Elements for Elementor Plugin <= 1.4.4 is vulnerable to Local File Inclusion

Software Ultimate Bootstrap Elements for Elementor Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-43140 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 5eacd8a2c878 Credits...

SysAid Software Command Injection

The vulnerability of the software used for supporting and controlling hardware and software systems of SysAid is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

ROS-20240806-06

Vulnerability of ruby-find-library-file function of EMACS text editor is related to incorrect neutralization of special elements. neutralization of special elements. Exploitation of the vulnerability could allow an attacker to execute arbitrary code Vulnerability in the lib-src/etags.c file of th...

DataGear 安全漏洞

DataGear is an open source, free data visualization and analysis platform from DataGear, Inc. A security vulnerability exists in DataGear version 5.0.0 and earlier versions, which originates in the function evaluationVariableExpression in the file ConversionSqlParamValueMapper.java that causes...

CVE-2024-33020 Buffer Over-read in WLAN HOST

Transient DOS while processing TID-to-link mapping IE elements...

CVE-2024-33020 Buffer Over-read in WLAN HOST

Transient DOS while processing TID-to-link mapping IE elements...

Junos OS Evolved Privilege Escalation

The vulnerability of the command-line interface CLI of the Junos OS Evolved routers from the PTX Series, ACX Series, and QFX Series exists due to the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to...

Junos OS Evolved Privilege Escalation

The vulnerability of the command-line interface CLI of Junos OS Evolved routers from the PTX Series, ACX Series, and QFX Series exists due to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to elevate...

PT-2024-25070 · Qualcomm · Snapdragon +159

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing the BSS parameter change count or MLD capabilities fields of the ML...

PT-2024-25065 · Qualcomm · Snapdragon +88

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while processing TID-to-link mapping IE elements. No information is provided about...

ctags Code Execution

The vulnerability of the lib-src/etags.c file in the ctags text editor EMACS is related to the improper elimination of special elements. Exploiting this vulnerability may allow an attacker to execute arbitrary code...

D-Link DIR-2150 Router Code Execution

The vulnerability of the application software interface of D-Link DIR-2150 routers exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ruijie EG-2000SE Web Interface Privilege Escalation

The vulnerability of the newcli.php web interface of the Ruijie EG-2000SE software gateway lies in the lack of measures taken to neutralize the special elements used in commands. Exploiting this vulnerability can allow an attacker, operating remotely, to enhance their privileges and gain...

NI VeriStand NIVSPRJ File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI VeriStand. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

CocoaPods Code Execution

The vulnerability of dependency managers for Swift and Objective-C CocoaPods exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MAL-2024-7832 Malicious code in zapier-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a72694a59e2b2fa9040cc6e3b823a0e1dabe2ebd53ea16ebd7afbfb8306e01 The OpenSSF Package Analysis project identified 'zapier-elements' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in zapier-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a72694a59e2b2fa9040cc6e3b823a0e1dabe2ebd53ea16ebd7afbfb8306e01 The OpenSSF Package Analysis project identified 'zapier-elements' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-27357

An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS. Local Privilege Escalation can occur during installations or updates by admins...

CVE-2024-27358

An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service DoS...

CVE-2024-27358

An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service DoS...