2721 matches found
DEBIAN-CVE-2024-47607
GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...
CVE-2024-53776
Cross-Site Request Forgery CSRF vulnerability in raphaelheide Donate Me donate-me allows Stored XSS.This issue affects Donate Me: from n/a through = 1.2.5...
CVE-2024-53755
Cross-Site Request Forgery CSRF vulnerability in Andrea Pernici Third Party Cookie Eraser third-party-cookie-eraser allows Stored XSS.This issue affects Third Party Cookie Eraser: from n/a through = 1.0.2...
CVE-2024-53716
Cross-Site Request Forgery CSRF vulnerability in overtrue wp auto top wp-auto-top allows Stored XSS.This issue affects wp auto top: from n/a through = 2.9.3...
CVE-2024-53709
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Uddin Generic Elements generic-elements-for-elementor allows DOM-Based XSS.This issue affects Generic Elements: from n/a through = 1.2.5...
CVE-2024-52487
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webcodingplace Ultimate Classified Listings ultimate-classified-listings allows Stored XSS.This issue affects Ultimate Classified Listings: from n/a through = 1.7...
CVE-2024-52464
CVE-2024-52464: Reflected XSS in WordPress plugin amr shortcodes (versions 1.7 and earlier). Root cause is improper input handling during web page generation, enabling an attacker-controlled input to be reflected in the output. Affected component: amr shortcodes. Impact: Reflected XSS risk on pag...
CVE-2024-53755
CVE-2024-53755 documents a CSRF-to-Stored XSS vulnerability in the WordPress plugin Third Party Cookie Eraser. Affected versions are listed as n/a through 1.0.2. Root cause is CSRF enabling stored XSS; CVSS-derived context in the initial description indicates a high-severity impact. Remediation r...
CVE-2024-53777
CVE-2024-53777 describes a CSRF-to-Stored XSS vulnerability in the WordPress plugin Simple Header and Footer (versions n/a through 1.0.0). Affected component is the Simple Header and Footer plugin for WordPress; root cause is CSRF enabling stored script execution, potentially impacting users of t...
CVE-2024-53781
CVE-2024-53781 refers to a CSRF-to-Stored XSS vulnerability in the WordPress plugin SpatialMatch IDX (
CVE-2024-53738
Server-Side Request Forgery SSRF vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Server Side Request Forgery.This issue affects Asset CleanUp: Page Speed Booster: from n/a through = 1.3.9.8...
CVE-2024-53738
CVE-2024-53738 describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Asset CleanUp: Page Speed Booster, affected versions are up to 1.3.9.8. The CVE entry notes a MEDIUM severity with CVSSv3.1 base score 4.4 and that the vulnerability affects authenticated users (admin+). Connect...
Malicious code in n-hub (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cbdc296029075a31aced0f56b22ed1082a7c6c0b9d80d0ed9ab47cb033d467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
JVN#43845108: Multiple FCNT Android devices vulnerable to authentication bypass
Multiple FCNT Android devices provide security features such as "privacy mode" where arbitrary applications can be set not to be displayed, etc. The devices contain an authentication bypass vulnerability CWE-306, where, under certain conditions, the setting pages may be accessed without...
CVE-2024-51228
An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote...
Malicious code in n-http-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c13801d43d60af89b56b44fb645f8cd6e571abf340332c2d4031b29aab946043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10989 Malicious code in n-http-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c13801d43d60af89b56b44fb645f8cd6e571abf340332c2d4031b29aab946043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-52471
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in petesheppard84 Extensions for Elementor allows Reflected XSS.This issue affects Extensions for Elementor: from n/a through 2.0.37...
CVE-2024-51846
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Simpson Community Yard Sale community-yard-sale allows Stored XSS.This issue affects Community Yard Sale: from n/a through = 1.1.11...