6650 matches found
WordPress News Element Elementor Blog Magazine Plugin < 1.0.6 is vulnerable to Local File Inclusion
Software News Element Elementor Blog Magazine Type Plugin Vulnerable versions 1.0.6 Fixed in 1.0.6 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-6459 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 9cdb1b21de6f Credits Project Black Required...
CVE-2024-7256
Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...
CVE-2024-7255
Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
CVE-2024-7255
CVE-2024-7255 affects Google Chrome (WebTransport) with an out-of-bounds read in Chromium before 127.6533.88. The root cause is an out-of-bounds memory access via a crafted HTML page, enabling a remote attacker to potentially read memory. Impact is described as high severity (C/H/I/H/A/H). Public...
WordPress WooCommerce PDF Vouchers Plugin < 4.9.5 is vulnerable to Multiple Vulnerabilities
Software WooCommerce PDF Vouchers Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A1: Broken Access Control Classification Multiple Vulnerabilities CVE CVE-2024-39650 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 7f3355fc5345 Credits Dave Jong...
WordPress WooCommerce PDF Vouchers Plugin < 4.9.5 is vulnerable to Arbitrary File Deletion
Software WooCommerce PDF Vouchers Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-39651 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 7c83b156fb00 Credits Dave Jong Patchsta...
PT-2025-17686 · Cloudera · Cloudera Hue
Name of the Vulnerable Software and Affected Versions: Cloudera Hue affected versions not specified Description: The issue is related to a directory traversal information disclosure problem. It is described as having a high severity. There is a proof-of-concept exploit available. Recommendations:...
WordPress Ultimate Classified Listings Plugin < 1.3 is vulnerable to Local File Inclusion
Software Ultimate Classified Listings Type Plugin Vulnerable versions 1.3 Fixed in 1.3 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-5882 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID b49a98246fbf Credits Project Black Required privilege...
WordPress Social Auto Poster Plugin <= 5.3.14 is vulnerable to Broken Access Control
Software Social Auto Poster Type Plugin Vulnerable versions = 5.3.14 Fixed in 5.3.15 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-6750 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID e7a22665ac54 Credits István Márton Required...
10,000 WordPress Sites Affected by High Severity Vulnerabilities in BookingPress WordPress Plugin
On July 2nd, 2024, during the 0-day Threat Hunt Promo of our Bug Bounty Program, we received a submission for an Arbitrary File Read to Arbitrary File Creation vulnerability in BookingPress, a WordPress plugin with over 10,000 active installations. This vulnerability makes it possible for...
CVE-2024-3176
Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2024-6776
Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
PT-2025-46931
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.182 Description An issue in the DevTools component of Google Chrome could allow a remote attacker to potentially escape the sandbox through a specially crafted HTML page. The security severity is rate...
CVE-2024-3176
Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...
CVE-2024-3176
Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...
CVE-2024-3173
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...
DEBIAN-CVE-2024-3169
Use after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-6775
Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2024-6775
Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...