8438 matches found
CVE-2024-55978 WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...
Malicious code in asymmetric-key-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...
MAL-2024-11875 Malicious code in asymmetric-key-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...
PT-2024-36630
Name of the Vulnerable Software and Affected Versions Code Generator Pro versions n/a through 1.2 Description The issue is related to improper neutralization of special elements used in an SQL command, which allows SQL injection. This is a type of attack where an attacker can inject malicious SQL...
WordPress plugin Code Generator Pro SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
CVE-2024-55999: Missing Authorization
Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...
CVE-2024-55978: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...
PT-2024-36250
Name of the Vulnerable Software and Affected Versions: Spartac Feedpress Generator versions 1.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicio...
PT-2024-36653 · Unknown · Marco Giannini Xml Multilanguage Sitemap Generator
Name of the Vulnerable Software and Affected Versions: Marco Giannini XML Multilanguage Sitemap Generator versions 2.0.6 and earlier Description: The issue is related to a missing authorization vulnerability in the Marco Giannini XML Multilanguage Sitemap Generator. This vulnerability affects the...
CVE-2024-54364: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...
WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin XML Multilanguage Sitemap Generator versions = 2.0.6...
WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Code Generator Pro versions = 1.2...
CVE-2023-38477
Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through 1.6.0...
CVE-2023-38477
Missing Authorization vulnerability in stasionok QR code MeCard/vCard generator wp-qrcode-me-v-card allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through = 1.6.0...
CVE-2023-38477: Missing Authorization
Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through 1.6.0...
SonicWALL SMA100 Encryption Issue Vulnerability
The SonicWALL SMA100 is a secure access gateway appliance from SonicWALL USA. The SonicWALL SMA100 suffers from a cryptographic issue vulnerability that stems from the use of a weakly encrypted pseudo-random number generator in the backup code generator. An attacker could exploit the vulnerabilit...
PT-2024-12729
Name of the Vulnerable Software and Affected Versions WordPress QR Code MeCard/VCard Generator Plugin versions 1.5.6 through 1.6.0 Description A high-severity issue affects the QR code MeCard/vCard generator, allowing broken access control due to missing authorization. This issue can be exploited...
media: v4l2-tpg: prevent the risk of a division by zero
...
CVE-2024-11709 AI Post Generator | AutoWriter <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion
The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aipostgeneratordeletePost AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated attackers, with...
CVE-2024-11709 AI Post Generator | AutoWriter <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion
The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aipostgeneratordeletePost AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated attackers, with...