Silicon Simplicity SDK 安全漏洞

The Silicon Simplicity SDK is an embedded software development platform from Silicon, Inc. for building Internet of Things IoT products based on our Series 2 and upcoming Series 3 wireless and MCU devices. A security vulnerability exists in Silicon Simplicity SDK versions prior to 2024.12.0, whic...

CVE-2024-37235 WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Adrian Tobey Groundhogg groundhogg allows Cross Site Request Forgery.This issue affects Groundhogg: from n/a through = 3.4.2.3...

Photon OS 4.0: Linux PHSA-2024-4.0-0722

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0722. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-56002

Missing Authorization vulnerability in mightyforms Contact Form, Survey & Form Builder – MightyForms mightyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form, Survey & Form Builder – MightyForms: from n/a through = 1.3.9...

CVE-2024-56002 WordPress Contact Form, Survey & Form Builder – MightyForms plugin <= 1.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in mightyforms Contact Form, Survey & Form Builder – MightyForms mightyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form, Survey & Form Builder – MightyForms: from n/a through = 1.3.9...

CVE-2024-56002

CVE-2024-56002 corresponds to a Missing Authorization vulnerability in the WordPress plugin MightyForms (Contact Form, Survey & Form Builder). The entry states affected versions are up to 1.3.9 (from n/a through 1.3.9) and describes broken access control enabling unauthorized access. Public refer...

CVE-2024-56217

CVE-2024-56217 concerns the WordPress Download Manager plugin (versions ≤ 3.3.03) with a Missing Authorization / Broken Access Control vulnerability due to incorrectly configured access control security levels. The issue allows bypass of authorization checks within the Download Manager. Affected ...

CVE-2024-56217 WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability

Missing Authorization vulnerability in W3 Eden, Inc. Download Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through 3.3.03...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.1, which originates from an application that may be able to access sensitive user data...

CVE-2024-37251

Cross-Site Request Forgery CSRF vulnerability in WPENGINE, INC. Advanced Custom Fields PRO.This issue affects Advanced Custom Fields PRO: from n/a before 6.3.2...

CVE-2024-37251

CVE-2024-37251 affects the WordPress plugin Advanced Custom Fields PRO from WPENGINE (versions before 6.3.2). The issue is Cross-Site Request Forgery (CSRF) caused by insufficient permission checks, per Snyk and Red Hat/NVD entries. The exploitability notes show no explicit in-the-wild exploitati...

JVN#08430039: "Shonen Jump+" App for Android fails to restrict custom URL schemes properly

"Shonen Jump+" App for Android provided by SHUEISHA INC. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly CWE-939 which may be exploited to direct the App to access any sites. Impact A remote attacker may lead a use...

CVE-2024-54296

CVE-2024-54296 describes an Authentication Bypass in CoSchool LMS (Codexpert, Inc.), allowing bypass of authentication due to Missing Authorization to Privilege Escalation. Affected versions: CoSchool LMS up to 1.2 (inclusive). Patch status in the provided records is Unpatched. CVSS v3.1 is liste...

CVE-2024-54296 WordPress CoSchool LMS plugin <= 1.2 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Codexpert, Inc CoSchool LMS allows Authentication Bypass.This issue affects CoSchool LMS: from n/a through 1.2...

FreeBSD : firefox -- multiple vulnerabilities (0e20e42c-b728-11ef-805a-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 0e20e42c-b728-11ef-805a-b42e991fc52e advisory. [email protected] reports: Tenable has extracted the preceding description block directly...

CVE-2024-53794

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryo Arkhe Blocks arkhe-blocks allows Stored XSS.This issue affects Arkhe Blocks: from n/a through = 2.27.0...

CVE-2024-53794

CVE-2024-53794 — WordPress Arkhe Blocks plugin (LOOS,Inc.) contains a stored XSS vulnerability in block attributes. Affected: Arkhe Blocks versions up to and including 2.27.0. 文 The vulnerability is confirmed as stored XSS due to improper input neutralization during web page generation. Connected...

NHS Ransomware Attack: Russian INC Ransom Gang Steals Patient Data

INC Ransom, a Russian-leanguage ransomware group has claimed responsibility for the ransomware attack on two NHS, hospitals...

CVE-2024-7488

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1...

CVE-2024-7488 Business Logic Error in RestApp Inc.'s Online Ordering System

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1...