CVE-2024-6668

The CVE-2024-6668 entry concerns the ProfilePro WordPress plugin (versions 1.3 and earlier). The underlying issue is improper sanitization/escaping of certain parameters and weak access controls, enabling cross-site scripting (XSS) by users with a very low privilege level (subscriber). Affected c...

CVE-2024-44106

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44106

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-6635

CVE-2024-6635 affects the WooCommerce - Social Login plugin for WordPress. Versions up to and including 2.7.3 are vulnerable due to insufficient controls in the woo_slg_login_email function, enabling unauthenticated users to log in as any existing user except administrators if they know the user’...

s2Member < 240325 - Limited Privilege Escalation

Description The plugin is vulnerable to limited privilege escalation in versions up to, and including, 240315. This is due to insufficient controls during user registration. This makes it possible for unauthenticated attackers to register with higher than the default permissions...

PT-2023-23291 · WordPress · Mainwp Child

Name of the Vulnerable Software and Affected Versions: MainWP Child plugin for WordPress versions up to, and including, 4.4.1.1 Description: The issue allows unauthenticated attackers to extract sensitive data, including the entire installation's database, due to insufficient controls on the...

Authentication flaw

A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the...

Authentication flaw

A vulnerability in the Quality of Voice Reporting QOVR service of Cisco Prime Collaboration Assurance PCA Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authentication controls. An attacker could exploit this...