WordPress Push Notifications for WordPress by PushAssist Plugin <= 3.0.8 is vulnerable to Arbitrary File Upload

Software Push Notifications for WordPress by PushAssist Type Plugin Vulnerable versions = 3.0.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52408 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 1a2483f66c15 Credits...

WordPress Gallerio Plugin <= 1.01 is vulnerable to Arbitrary File Upload

Software Gallerio Type Plugin Vulnerable versions = 1.01 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52400 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID b36e242fa444 Credits CTRL Chance Required privilege Subscriber Publish...

WordPress Xin Theme <= 1.0.8.1 is vulnerable to PHP Object Injection

Software Xin Type Theme Vulnerable versions = 1.0.8.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52412 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID da7dd1423a5a Credits Mika Required privilege Unauthenticated Published 13...

WordPress User Management Plugin <= 1.1 is vulnerable to Arbitrary File Upload

Software User Management Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52403 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 886265b035b0 Credits stealthcopter Required privilege Subscriber...

WordPress Referrer Detector Plugin <= 4.2.1.0 is vulnerable to PHP Object Injection

Software Referrer Detector Type Plugin Vulnerable versions = 4.2.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52410 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 462ef6116947 Credits Bonds Required privilege Unauthenticat...

Intel EMA Software Advisory - Lenovo Support US

No description provided...

DEBIAN-CVE-2024-11110

Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...

CVE-2024-11110

Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...

CVE-2024-11110

Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...

Qualcomm Bluetooth Controller Vulnerability - Lenovo Support US

No description provided...

Security Advisory EPM November 2024 for EPM 2024 and EPM 2022 SU6

Update Regarding Ivanti EPM Endpoint Manager Downloads As part of our ongoing efforts to enhance your experience and streamline our processes we have migrated the software downloads from the Ivanti Community to the Ivanti License System ILS. You will continue to use your current Ivanti Single...

MAL-2024-10610 Malicious code in bitcore-walet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 110a5b48753df0ea2f5fac8ef07cd07fda5808080b865d45881c21d09477bf81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-16758 · Sourcecodester · Sourcecodester Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Record Management System version 1.0 SourceCodester versions prior to the latest update Description: A vulnerability has been found in the SourceCodester Student Record Management System, affecting the Main Menu...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 12 security fixes: 373263969 High CVE-2024-11110: Inappropriate implementation in Blink. Reported by Vsevolod Kokorin Slonser of Solidlab on 2024-10-14 360520331 Medium CVE-2024-11111: Inappropriate implementation in Autofill. Reported by Narendra...

Security Advisory Ivanti Avalanche (Multiple CVEs) - Q4 2024 Release

Summary Ivanti has released updates for Ivanti Avalanche which addresses five high severity vulnerabilities. Successful exploitation could lead to denial of service to legitimate users or leaking of sensitive information. We are not aware of any customers being exploited by these vulnerabilities ...

WordPress Matix Popup Builder Plugin <= 1.0.0 is vulnerable to Privilege Escalation

Software Matix Popup Builder Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-52382 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 5c4697e5f82c Credits João...

WordPress Hive Support – WordPress Help Desk Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload

Software Hive Support – WordPress Help Desk Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52370 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 6b874f7d4e45 Credits stealthcopter Requir...

WordPress Easy CSV Importer BETA Plugin <= 7.0.0 is vulnerable to Arbitrary File Upload

Software Easy CSV Importer BETA Type Plugin Vulnerable versions = 7.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52372 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 760bb0fc208a Credits stealthcopter Required privilege...

WordPress CE21 Suite Plugin <= 2.2.0 is vulnerable to Sensitive Data Exposure

Software CE21 Suite Type Plugin Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Sensitive Data Exposure CVE CVE-2024-10285 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 6f3d12b67220 Credits István Márton Required privilege...

WordPress Image Classify Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload

Software Image Classify Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-51789 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 625646848ec4 Credits stealthcopter Required privilege...