5384 matches found
CVE-2024-54296 WordPress CoSchool LMS plugin <= 1.2 - Account Takeover vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Codexpert, Inc CoSchool LMS allows Authentication Bypass.This issue affects CoSchool LMS: from n/a through 1.2...
FreeBSD : firefox -- multiple vulnerabilities (0e20e42c-b728-11ef-805a-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 0e20e42c-b728-11ef-805a-b42e991fc52e advisory. [email protected] reports: Tenable has extracted the preceding description block directly...
CVE-2024-53794
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryo Arkhe Blocks arkhe-blocks allows Stored XSS.This issue affects Arkhe Blocks: from n/a through = 2.27.0...
CVE-2024-53794
CVE-2024-53794 — WordPress Arkhe Blocks plugin (LOOS,Inc.) contains a stored XSS vulnerability in block attributes. Affected: Arkhe Blocks versions up to and including 2.27.0. 文 The vulnerability is confirmed as stored XSS due to improper input neutralization during web page generation. Connected...
NHS Ransomware Attack: Russian INC Ransom Gang Steals Patient Data
INC Ransom, a Russian-leanguage ransomware group has claimed responsibility for the ransomware attack on two NHS, hospitals...
CVE-2024-7488
Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1...
CVE-2024-7488 Business Logic Error in RestApp Inc.'s Online Ordering System
Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1...
CVE-2024-7488 Business Logic Error in RestApp Inc.'s Online Ordering System
Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1...
Photon OS 5.0: Linux PHSA-2024-5.0-0405
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0405. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2024-52454
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This issue affects GoQMieruca: from n/a through = 1.0.3...
CVE-2024-52455
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQSmile goqsmile allows Reflected XSS.This issue affects GoQSmile: from n/a through = 1.0.1...
CVE-2024-52454 WordPress GoQMieruca plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This issue affects GoQMieruca: from n/a through = 1.0.3...
CVE-2024-52455
CVE-2024-52455 — WordPress plugin GoQSmile from GoQSystem Inc. suffers a Reflected XSS due to improper input handling. Affected versions include GoQSmile
CVE-2024-52454
CVE-2024-52454 affects the WordPress GoQMieruca plugin (GoQMieruca) from GoQSystem Inc. A Reflected XSS flaw arises from improper input neutralization during web page generation, affecting versions up to 1.0.0. Public records indicate a patch exists with version 1.0.1 or later; upgrading to 1.0.1...
JVN#43845108: Multiple FCNT Android devices vulnerable to authentication bypass
Multiple FCNT Android devices provide security features such as "privacy mode" where arbitrary applications can be set not to be displayed, etc. The devices contain an authentication bypass vulnerability CWE-306, where, under certain conditions, the setting pages may be accessed without...
CVE-2024-53068 firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix slab-use-after-free in scmibusnotifier The scmidev-name is released prematurely in scmidevicedestroy, which causes slab-use-after-free when accessing scmidev-name in scmibusnotifier. So move the release of...
CVE-2024-51648
Cross-Site Request Forgery CSRF vulnerability in hands01 e-shops e-shops-cart2 allows Reflected XSS.This issue affects e-shops: from n/a through = 1.0.3...
CVE-2024-50546
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Riley Magnuson MyOrderDesk myorderdesk allows DOM-Based XSS.This issue affects MyOrderDesk: from n/a through = 3.2.6...
CVE-2024-43338
CVE-2024-43338 is a CSRF vulnerability in Crowdsignal Dashboard – Polls, Surveys & more (WordPress plugin Crowdsignal) affecting versions up to and including 3.1.2. The issue permits Cross Site Request Forgery with CVSS v3.1 base score 4.3 (Medium). Connected Patchstack entries classify the vulne...