Lucene search
+L

840 matches found

OSV
OSV
added 2024/11/02 2:15 a.m.6 views

CVE-2024-9868

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate Widget 'url' parameter in all versions up to, and including, 5.10.1 due to insufficient input sanitization a...

5.4CVSS5.9AI score0.00256EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/02 2:15 a.m.17 views

CVE-2024-9868

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate Widget 'url' parameter in all versions up to, and including, 5.10.1 due to insufficient input sanitization a...

5.4CVSS0.00256EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/02 2:3 a.m.25 views

CVE-2024-9868 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate Widget 'url' parameter in all versions up to, and including, 5.10.1 due to insufficient input sanitization a...

5.4CVSS0.00256EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/02 12:0 a.m.7 views

WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS5.9AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.11 views

PT-2024-39900 · WordPress · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Element Pack Elementor Addons plugin for WordPress versions up to, and including, 5.10.1 Description: The issue is related to Stored Cross-Site Scripting via the url parameter in the Age Gate Widget, caused by insufficient input...

5.4CVSS6.2AI score0.00256EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2024/10/28 12:0 a.m.10 views

The vulnerability of the SCKUd Gate software, related to the disclosure of information, allows attackers to obtain information about registered users in the system.

The vulnerability of the SCKU Dome software is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to obtain information about registered users within the system...

5.3CVSS5.5AI score
SaveExploits0References1Affected Software1
NCSC
NCSC
added 2024/10/17 1:15 p.m.21 views

Vulnerabilities fixed in Oracle Database products

Oracle has fixed vulnerabilities in several Database products and subsystems, including the Core database, Application Express, Autonomous Health Framework, Essbase, GoldenGate, SQL Developer and Secure Backup. A malicious party can exploit the vulnerabilities to launch attacks that can lead to t...

10CVSS7.5AI score0.99999EPSS
SaveExploits154References1
NVD
NVD
added 2024/09/28 7:15 p.m.34 views

CVE-2024-9315

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/managedepartment.php. The manipulation of the argument id leads to sql injection. The attack may ...

8.8CVSS0.00532EPSS
SaveExploits1References5
OSV
OSV
added 2024/09/28 7:15 p.m.10 views

CVE-2024-9315

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/managedepartment.php. The manipulation of the argument id leads to sql injection. The attack may ...

8.8CVSS5.8AI score0.00532EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/09/28 7:0 p.m.43 views

CVE-2024-9315 SourceCodester Employee and Visitor Gate Pass Logging System manage_department.php sql injection

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/managedepartment.php. The manipulation of the argument id leads to sql injection. The attack may ...

6.5CVSS0.00532EPSS
SaveExploits1References5
CVE
CVE
added 2024/09/28 7:0 p.m.70 views

CVE-2024-9315

CVE-2024-9315 affects SourceCodester Employee and Visitor Gate Pass Logging System v1.0. The issue is a SQL injection in the /admin/maintenance/manage_department.php page caused by unsafely handling the id parameter, enabling remote exploitation. Multiple sources confirm the vulnerability details...

8.8CVSS7.1AI score0.00532EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2024/09/28 12:0 a.m.7 views

Employee and Visitor Gate Pass Logging System SQL注入漏洞

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in SourceCodester Employee and Visitor Gate Pass Logging System version 1.0, which stems from an SQL injection in the id...

8.8CVSS7.1AI score0.00532EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/09/28 12:0 a.m.14 views

PT-2024-39564 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical issue affects the processing of the file /admin/maintenance/manage department.php, where the manipulation of the id argument leads to SQL...

8.8CVSS7.1AI score0.00532EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/08/16 12:0 a.m.2 views

PT-2024-7249 · Скуд Gate · Скуд Gate

Name of the Vulnerable Software and Affected Versions: СКУД Gate affected versions not specified Description: The issue is related to the use of a weak encryption algorithm, allowing an attacker to decrypt the user's password. Recommendations: At the moment, there is no information about a newer...

7.8CVSS6.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/16 12:0 a.m.4 views

PT-2024-7252 · Скуд Gate · Скуд Gate

Name of the Vulnerable Software and Affected Versions: СКУД Gate affected versions not specified Description: The issue is related to insufficient access control in the СКУД Gate software. Exploitation of this issue may allow a remote attacker to gain access to the software's database...

5.4CVSS7.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/16 12:0 a.m.3 views

PT-2024-7250 · Скуд Gate · Скуд Gate

Name of the Vulnerable Software and Affected Versions: СКУД Gate affected versions not specified Description: The issue is related to information disclosure. Exploitation of this issue may allow a remote attacker to obtain information about registered users in the system. Recommendations: At the...

5CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2024/07/24 4:15 p.m.34 views

CVE-2024-7069

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some unknown processing of the file /employeegatepass/classes/Master.php?f=deletedepartment. The manipulation of the argument id leads to sql...

7.5CVSS0.00423EPSS
SaveExploits1References4
OSV
OSV
added 2024/07/24 4:15 p.m.7 views

CVE-2024-7069

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some unknown processing of the file /employeegatepass/classes/Master.php?f=deletedepartment. The manipulation of the argument id leads to sql...

7.5CVSS5.7AI score0.00423EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/07/24 3:31 p.m.40 views

CVE-2024-7069 SourceCodester Employee and Visitor Gate Pass Logging System sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some unknown processing of the file /employeegatepass/classes/Master.php?f=deletedepartment. The manipulation of the argument id leads to sql...

6.5CVSS0.00423EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/07/24 3:31 p.m.12 views

CVE-2024-7069 SourceCodester Employee and Visitor Gate Pass Logging System sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some unknown processing of the file /employeegatepass/classes/Master.php?f=deletedepartment. The manipulation of the argument id leads to sql...

6.5CVSS7.4AI score0.00423EPSS
SaveExploits1References4
Rows per page
Query Builder