Lucene search
+L

5050 matches found

Cvelist
Cvelist
•added 2024/12/09 1:00 a.m.•39 views

CVE-2024-12353 SourceCodester Phone Contact Manager System User Menu MenuDisplayStart input validation

A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking...

4.8CVSS0.00303EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/12/09 1:00 a.m.•20 views

CVE-2024-12353 SourceCodester Phone Contact Manager System User Menu MenuDisplayStart input validation

A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking...

4.8CVSS6.9AI score0.00303EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•19 views

SourceCodester Phone Contact Manager System 安全漏洞

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in SourceCodester Phone Contact Manager System version 1.0, which is caused by a buffer overflow issue in the UserInterface::MenuDisplayStart function...

7.8CVSS5.9AI score0.0036EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•9 views

CVE-2024-12354: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affected is the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation leads to buffer overflow. It is possible to launch the attack on the local host. T...

7.8CVSS5.7AI score0.0036EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•8 views

CVE-2024-12353: Improper Input Validation

A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking...

7.8CVSS5.4AI score0.00303EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/08 12:00 a.m.•22 views

PT-2024-17562 · Sourcecodester · Sourcecodester Phone Contact Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester Phone Contact Manager System version 1.0 Description: The issue is related to insufficient input validation, which can allow an attacker to execute arbitrary code. It affects the function UserInterface::MenuDisplayStart of the...

7.8CVSS7.5AI score0.00303EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2024/12/08 12:00 a.m.•31 views

PT-2024-17563 · Sourcecodester · Sourcecodester Phone Contact Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester Phone Contact Manager System version 1.0 Description: The issue is related to a buffer overflow in memory. It is possible to launch the attack on the local host. The manipulation of the UserInterface::MenuDisplayStart function ...

7.8CVSS8AI score0.0036EPSS
SaveExploits1References10
NVD
NVD
•added 2024/12/07 2:15 a.m.•35 views

CVE-2024-7894

The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing capability check on the 'actions' function in versions up to, and including, 0.19.1. This makes it possible for unauthenticated attackers to modify delete or modify the license...

5.3CVSS0.00366EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/07 1:45 a.m.•17 views

CVE-2024-7894 If Menu <= 0.19.1 - Missing Authorization to License Key Update

The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing capability check on the 'actions' function in versions up to, and including, 0.19.1. This makes it possible for unauthenticated attackers to modify delete or modify the license...

5.3CVSS7AI score0.00366EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/07 1:45 a.m.•38 views

CVE-2024-7894 If Menu <= 0.19.1 - Missing Authorization to License Key Update

The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing capability check on the 'actions' function in versions up to, and including, 0.19.1. This makes it possible for unauthenticated attackers to modify delete or modify the license...

5.3CVSS0.00366EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/07 12:00 a.m.•7 views

PT-2024-38665

Name of the Vulnerable Software and Affected Versions If Menu plugin for WordPress versions up to, and including, 0.19.1 Description The issue allows unauthorized modification of the plugin's license key due to a missing capability check on the actions function. This makes it possible for...

5.3CVSS0.00366EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/12/07 12:00 a.m.•16 views

WordPress plugin If Menu 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/07 12:00 a.m.•5 views

CVE-2024-7894: Missing Authorization

The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing capability check on the 'actions' function in versions up to, and including, 0.19.1. This makes it possible for unauthenticated attackers to modify delete or modify the license...

5.3CVSS5.7AI score0.00366EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/06 1:15 p.m.•15 views

WordPress If Menu plugin <= 0.19.1 - Missing Authorization to License Key Update vulnerability

Missing Authorization to License Key Update vulnerability discovered by Marco Wotschka in WordPress Plugin If Menu versions = 0.19.1...

5.3CVSS7AI score0.00366EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/06 12:00 a.m.•3 views

PT-2024-16920

Name of the Vulnerable Software and Affected Versions Clickbank WordPress Plugin Storefront versions up to, and including, 1.7 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation via the cs menu page. This allows unauthenticated attackers to...

6.1CVSS0.00155EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/11/28 12:00 a.m.•20 views

PT-2024-40550 · Mozilla · Seamonkey

Name of the Vulnerable Software and Affected Versions: SeaMonkey versions prior to 2.53.19 Description: The issue is related to a security vulnerability in SeaMonkey. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where thi...

7AI score
SaveExploits0References3
CVE
CVE
•added 2024/11/20 11:11 a.m.•63 views

CVE-2024-52445

CVE-2024-52445 is a deserialization vulnerability in the WordPress plugin QRMenu Restaurant QR Menu Lite. Affected versions are

8.8CVSS7.2AI score0.00535EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/20 6:42 a.m.•16 views

CVE-2024-10365 The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.3 via the render function in modules/widgets/tpcarouselanything.php,...

4.3CVSS6.5AI score0.00345EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/20 6:42 a.m.•81 views

CVE-2024-10365

Summary: CVE-2024-10365 affects The Plus Addons for Elementor (WordPress plugin) up to version 6.0.3 and causes Sensitive Information Exposure via the render function used by multiple widgets (e.g., tp_carousel_anything.php, tp_page_scroll.php). Impact: authenticated attackers with Contributor-le...

4.3CVSS4.4AI score0.00345EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/11/20 6:15 a.m.•21 views

CVE-2024-9653

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS7.4AI score0.00323EPSS
SaveExploits0References2
Rows per page
Query Builder