7242 matches found
CVE-2024-30501
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...
CVE-2024-30501 WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...
CVE-2024-30501
The CVE-2024-30501 entry concerns WPChill’s Download Monitor plugin (WordPress) up to version 4.9.4, where an improper neutralization of SQL elements causes an SQL Injection. The vulnerability affects the plugin’s admin-facing code and can impact confidentiality, integrity, and availability as de...
CVE-2024-30501 WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...
WordPress Plugin Download Monitor SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-23428 · Unknown · Download Monitor
Name of the Vulnerable Software and Affected Versions: Download Monitor versions through 4.9.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicio...
WordPress Download Monitor Plugin <= 4.9.4 is vulnerable to SQL Injection
Software Download Monitor Type Plugin Vulnerable versions = 4.9.4 Fixed in 4.9.5 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30501 Patch priority Low CVSS severity Low 7.6 Developer WPChill PSID 3e76ad1985a5 Credits movrment Required privilege Administrator Published 28...
Security Bulletin: Enterprise Content Manager System Monitor For March 2024 - Multiple CVE adressed
Summary Enterprise Content Manager System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...
CVE-2024-29907
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...
CVE-2024-29907 WordPress SEO Backlink Monitor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...
CVE-2024-29907 WordPress SEO Backlink Monitor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...
CVE-2024-29907
CVE-2024-29907 affects the SEO Backlink Monitor plugin for WordPress, exposing a Reflected XSS in web page generation. Affected: SEO Backlink Monitor
PT-2024-23128 · Unknown · Active Websight Seo Backlink Monitor
Name of the Vulnerable Software and Affected Versions: Active Websight SEO Backlink Monitor versions 1.5.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attack...
WordPress Plugin SEO Backlink Monitor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress SEO Backlink Monitor Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)
Software SEO Backlink Monitor Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29907 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 62c1627bf899 Credits Dimas Maulana Required...
PT-2024-10973 · Unknown +1 · Aops-Ceres +1
Name of the Vulnerable Software and Affected Versions: openEuler aops-ceres versions 1.3.0 through 1.4.1 Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection', which allows Command Injection. This problem is...
The vulnerability in the Office Performance Monitor executable file of the Microsoft Office software package allows a perpetrator to gain increased privileges.
The vulnerability of the Office Performance Monitor executable file of the Microsoft Office software package is related to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially...
Xen Security Vulnerabilities
Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen 4.14...
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Security Vulnerability
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A security vulnerability exists...
