2721 matches found
CVE-2024-44100
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545...
CVE-2024-47031
CVE-2024-47031 is an elevation-of-privilege flaw in the ABL component (A-329163861) affecting Google Pixel devices running Android before the 2024-10-05 patch. The issue enables local privilege escalation with no user interaction; CVSSv3.1 indicates LOCAL access and High impact to confidentiality...
CVE-2024-47030
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818...
CVE-2024-47158
N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed on the instructor's browser, or the instructor may be directed to a malicious website...
CVE-2024-47158
N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed on the instructor's browser, or the instructor may be directed to a malicious website...
CVE-2024-47158
The CVE-2024-47158 vulnerability affects N-LINE 2.0.6 and earlier, where improper input validation (CWE-94) allows code injection that can execute arbitrary code in the instructor’s browser or redirect to a malicious site. Public sources (JVN/NVD) indicate the issue affects N-LINE 2.0.6 and prior...
PT-2024-32445 · N-Line · N-Line
Name of the Vulnerable Software and Affected Versions: N-LINE versions 2.0.6 and prior Description: The issue allows for code injection, potentially leading to the execution of arbitrary code on the instructor's browser or redirection to a malicious website. Recommendations: For N-LINE versions...
Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a now-patched security flaw in Google Chrome to seize control of infected devices. Cybersecurity vendor Kaspersky said it made the discovery after it came across a novel attack chain in May 20...
CVE-2024-47328
CVE-2024-47328 is an SQL Injection vulnerability in the WordPress plugin FunnelKit Automation By Autonami . It affects versions up to 3.1.2 and stems from improper neutralization of SQL commands. Exploitation requires Administrator privileges, with network attack potential and impact on confident...
CVE-2024-49274
Cross-Site Request Forgery CSRF vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Cross Site Request Forgery.This issue affects VOD Infomaniak: from n/a through = 1.5.7...
CVE-2024-49274
The CVE-2024-49274 entry covers a CSRF vulnerability in the WordPress plugin VOD Infomaniak (Infomaniak Staff VOD) affecting versions up to and including 1.5.7. The issue enables CSRF within the plugin, and a fixed release is available (1.5.8). Connected sources confirm the vulnerability and the ...
CVE-2024-49628
CVE-2024-49628 is a CSRF vulnerability in the WordPress plugin Most And Least Read Posts Widget (WhileTrue) affecting versions 2.5.18 and earlier. Unauthenticated attackers could exploit CSRF to perform unintended actions. The issue is fixed in version 2.5.19; update the plugin to 2.5.19 or later...
CVE-2024-49605
CVE-2024-49605 (WordPress Community Lite Video Chat plugin
NEUMANN N-LINE 安全漏洞
NEUMANN N-LINE is an online course training tool for LIVE and recorded distribution from NEUMANN Japan. A security vulnerability exists in NEUMANN N-LINE version 2.0.6 and prior versions, which stems from improper input validation, where arbitrary code may be executed on a user's browser or may b...
CVE-2024-49237
Cross-Site Request Forgery CSRF vulnerability in ahmeti Ahmeti Wp Timeline ahmeti-wp-timeline allows Stored XSS.This issue affects Ahmeti Wp Timeline: from n/a through = 5.1...
CVE-2024-43997 WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.14...
CVE-2024-49244 WordPress SV Product Import Export for WooCommerce plugin <= 1.0.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vrinsoft CSV Product Import Export for WooCommerce csv-wc-product-import-export.This issue affects CSV Product Import Export for WooCommerce: from n/a through = 1.0.0...
CVE-2024-49246
CVE-2024-49246 describes an SQL Injection vulnerability in WordPress plugin Ajax Rating with Custom Login (versions up to 1.1). The issue arises from improper neutralization of special elements in an SQL command, enabling unauthenticated SQL injection. Public references in the connected documents...
CVE-2024-48031
Cross-Site Request Forgery CSRF vulnerability in sumitsurai Featured Posts with Multiple Custom Groups FPMCG featured-posts-with-multiple-custom-groups-fpmcg allows Cross Site Request Forgery.This issue affects Featured Posts with Multiple Custom Groups FPMCG: from n/a through = 4.0...