856 matches found
WordPress Load More Anything plugin <= 3.3.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Load More Anything versions = 3.3.5...
WordPress Load More Anything Plugin <= 3.3.5 is vulnerable to Broken Access Control
Software Load More Anything Type Plugin Vulnerable versions = 3.3.5 Fixed in 3.3.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32110 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 324c36183bf9 Credits Dhabaleshwar Das Required...
The vulnerability of the AutomationDirect C-MORE EA9 HMI software’s microprogramming system, related to unencrypted storage of critical information, allows a intruder to gain unauthorized access to protected data.
The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI relates to the unencrypted storage of critical information. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...
PT-2024-18308 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: WordPress Infinite Scroll – Ajax Load More plugin for WordPress versions up to, and including, 7.0.1 Description: The issue allows authenticated attackers with administrator-level access and above to read the contents of arbitrary files on th...
WordPress Plugin Essential Addons for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-22980 · WordPress · Essential Addons For Elementor
Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress versions up to, and including, 5.9.13 Description: The issue allows unauthenticated attackers to extract sensitive data,...
thomas-more-partners.com Cross Site Scripting vulnerability OBB-3904568
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
letsgrowmore.in Cross Site Scripting vulnerability OBB-3898111
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-26664
CVE-2024-26664 : The Linux kernel hwmon: coretemp fix addresses an out-of-bounds memory access. The bug arises when pdata->cpu_map[] is set before the out-of-bounds check, potentially triggering on systems with more than 128 cores per package. Connected sources corroborate the vulnerability an...
The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI, related to the operation of writing data beyond the buffer in memory, allows a intruder to trigger a malfunction during maintenance operations.
The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause malfunctions during...
WordPress Ajax Load More plugin <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by afei in WordPress Plugin Ajax Load More versions = 7.0.1...
WordPress Ajax Load More Plugin <= 7.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Ajax Load More Type Plugin Vulnerable versions = 7.0.1 Fixed in 7.0.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3ee5a13bc7f5 Credits afei Required privilege Administrat...
The vulnerability of the AutomationDirect C-MORE EA9 HMI software-related to incorrect restrictions on path names in the restricted access catalog allows a intruder to trigger a service failure.
The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker to trigger a service failure...
CVE-2024-25137
In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions...
CVE-2024-25138 AutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password
In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device...
CVE-2024-25138
The CVE-2024-25138 entry affects AutomationDirect C-MORE EA9 HMI, where credentials are stored in plaintext on the device. The vulnerability stems from plaintext storage of passwords in the EA9 HMI platform, enabling exposure of authentication data. CISA/ICS advisory notes potential remote exploi...
CVE-2024-25138 AutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password
In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device...
CVE-2024-25137 AutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow
In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions...
CVE-2024-25137 AutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow
In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions...
CVE-2024-25136 AutomationDirect C-MORE EA9 HMI Path Traversal
There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content...