5379 matches found
CVE-2024-34762
CVE-2024-34762 affects the WordPress plugin Advanced Custom Fields Pro (WP ACF Pro). The issue is an improper limitation of pathnames to a restricted directory, enabling PHP Local File Inclusion. Public details indicate impact up to versions prior to 6.2.10 (with some sources noting an authentica...
CVE-2024-34761
CVE-2024-34761 is a vulnerability in the WordPress plugin Advanced Custom Fields Pro (WP ACF Pro) where an improper control of code generation enables Code Injection. The issue affects versions up to 6.2.9 (n/a before 6.2.10 per sources) and can be exploited by an authenticated user with Contribu...
CVE-2024-23524
Missing Authorization vulnerability in ONTRAPORT Inc. PilotPress.This issue affects PilotPress: from n/a through 2.0.30...
CVE-2024-23524 WordPress PilotPress plugin <= 2.0.30 - Broken Access Control vulnerability
Missing Authorization vulnerability in ONTRAPORT Inc. PilotPress.This issue affects PilotPress: from n/a through 2.0.30...
CVE-2024-36734
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the dim parameter...
CVE-2024-36740
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index as a negative number exceeds the range of size...
CVE-2024-36735
OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating...
CVE-2024-36732
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.tensordot...
CVE-2024-36730
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting negative values into the oneflow.zeros/ones parameter...
CVE-2024-36730
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting negative values into the oneflow.zeros/ones parameter...
CVE-2024-36730
CVE-2024-36730 concerns OneFlow-Inc Oneflow v0.9.1 with improper input validation in the zeros/ones parameter, allowing a Denial of Service via negative values. The core issue is input validation weakness in creating arrays with negative inputs, leading to high-severity impact (per CVSS 3.1 data)...
CVE-2024-36730
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting negative values into the oneflow.zeros/ones parameter...
CVE-2024-36732
CVE-2024-36732 affects OneFlow-Inc. Oneflow v0.9.1 where processing an empty array with oneflow.tensordot can trigger a Denial of Service. The linked sources across NVD/Red Hat/CNNVD/PT Security detail the same issue without providing a patched version or explicit exploit details. The precise roo...
CVE-2024-36732
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.tensordot...
CVE-2024-36734
CVE-2024-36734 involves OneFlow-Inc. Oneflow v0.9.1, with an improper input validation in the dim parameter that can be exploited to cause a Denial of Service. The vulnerability is described across multiple sources as a DoS triggered by negative input values for dim, leading to availability impac...
CVE-2024-36735
CVE-2024-36735 affects OneFlow v0.9.1. The issue is that the parameter oneflow.eye being floating does not trigger an error or warning, potentially allowing silent misconfiguration. Exploitation details are not provided in the connected documents. The PT Security entry recommends restricting the ...
CVE-2024-36735
OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating...
CVE-2024-36735
OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating...
CVE-2024-36740
The CVE-2024-36740 issue affects OneFlow-Inc Oneflow v0.9.1, where using a negative index that exceeds the size range can trigger a Denial of Service. The PT-2024-27147 entry corroborates the DoS condition caused by a negative index, with no publicly available patch information in the provided do...