CVE-2024-31934

Technical details about CVE-2024-31934 are not provided in the supplied documents. The materials only mention a CSRF issue in Link Whisper Free (up to version 0.6.9); no affected platforms, versions, or fixes are specified here. Monitor for updates.

CVE-2024-31935

CVE-2024-31935 describes a Cross-Site Request Forgery (CSRF) vulnerability in BracketSpace Simple Post Notes for WordPress, affecting versions from n/a up to 1.7.6. The available documents confirm the vulnerability type and affected version range but do not provide specific root-cause details, ex...

CVE-2024-31936

CVE-2024-31936 is a CSRF vulnerability in the WordPress plugin UsersWP by AyeCode Ltd. Affected versions are any before 1.2.6. The CVSS base metrics indicate a Medium severity (3.1 vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L; base score 5.4). The provided sources do not specify exploit details or...

CVE-2023-32295

CVE-2023-32295 relates to Easy!Appointments (WordPress plugin)

CVE-2024-20796

Adobe Animate (Windows/macOS) versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read that can disclose memory contents. Exploitation requires user interaction (victim opens a malicious file). The issue is listed as CVE-2024-20796. Adobe APSB24-26 and related advisories indicate...

CVE-2023-6257

CVE-2023-6257 affects the WordPress plugin Inline Related Posts (before v3.6.0). The root cause is missing authorization in an AJAX action that serves post content to authenticated users, enabling subscribers to read content from password-protected posts. Reported base CVSS v3.1 score is 4.3 (Med...

CVE-2024-3621

The CVE-2024-3621 issue affects SourceCodester Kortex Lite Advocate Office Management System v1.0, with a SQL injection in the /control/register_case.php file. The vulnerability arises from manipulation of multiple input parameters (title, case_no, client_name, court, case_type, case_stage, legel...

CVE-2024-3618

CVE-2024-3618 affects SourceCodester Kortex Lite Advocate Office Management System 1.0. The vulnerability is in an unknown function of the file /control/activate_case.php where manipulation of the argument id leads to SQL injection . It can be exploited remotely, and the exploit has been disclose...

CVE-2024-25572

CVE-2024-25572 affects Ninja Forms for WordPress prior to version 3.4.31. The issue is a CSRF vulnerability: if an administrator views a malicious page while logged in, unintended operations may be performed. Affected product/version: Ninja Forms before 3.4.31. Red Hat, NVD, JVN and related sourc...

CVE-2024-3617

Summary of CVE-2024-3617 : A SQL injection vulnerability affects SourceCodester Kortex Lite Advocate Office Management System 1.0, specifically in the file /control/deactivate_case.php where manipulating the argument id enables injection. The issue is exploitable remotely over the network with li...

CVE-2023-6811

CVE-2023-6811 affects the Language Translate Widget for WordPress – ConveyThis plugin. The vulnerability is a stored cross-site scripting (XSS) via the api_key parameter in all versions up to 223, caused by insufficient input sanitization and output escaping. Exploitation by unauthenticated users...

CVE-2024-3652

CVE-2024-3652 affects the Libreswan IPsec/IKE implementation. When using IKEv1 without an esp= line, and the peer requests AES-GMAC, Libreswan’s default proposal handler triggers an assertion failure, causing a crash and restart. IKEv2 connections are not affected. Concrete details about affected...

CVE-2024-3614

SourceCodester Warehouse Management System 1.0 contains an XSS vulnerability in customer.php, triggered by manipulating the parameters nama_customer, alamat_customer, or notelp_customer. This remote vulnerability affects an unknown portion of the file and has been publicly disclosed; exploitation...

CVE-2024-25852

Linksys RE7000 is affected by CVE-2024-25852 (v2.0.9, v2.0.11, v2.0.15) due to a command execution vulnerability in the AccessControlList parameter of the access control function point. The vulnerability allows an attacker to achieve device administrator rights via command execution. The connecte...

CVE-2024-31678

CVE-2024-31678 affects Sourcecodester Loan Management System v1.0. The vulnerability is SQL Injection via the password parameter in login.php, with CVSS 3.1/3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). Public sources confirm the flaw but do not provide concrete expl...

CVE-2023-29483

CVE-2023-29483 affects dnspython (used with eventlet) and enables a remote attacker to interfere with DNS name resolution by sending an invalid UDP packet before a valid one (a TuDoor attack). Affected combo: eventlet before 0.35.2 used in dnspython before 2.6.0. The note indicates 2.6.0 is unusa...

CVE-2024-22718

CVE-2024-22718 is an XSS in Form Tools 3.1.1 via the client_id parameter in the application URL. Multiple sources (NVD/Red Hat/CNNVD/CVELIST) confirm a high-severity vulnerability with CVSS v3.1: base score 9.6 (CRITICAL, AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The Red Hat entry and other issuances...

CVE-2024-3612

CVE-2024-3612 affects SourceCodester Warehouse Management System 1.0, specifically the barang.php file. The vulnerability is a cross-site scripting (XSS) flaw caused by manipulation of the nama_barang/merek parameter, enabling remote exploitation. Documents consistently describe it as an external...

CVE-2024-31997

CVE-2024-31997 affects XWiki Platform: UI extension parameters are interpreted as Velocity code and executed with programming rights, enabling remote code execution. Affected are versions prior to 4.10.19, 15.5.4, and 15.10-rc-1. Remediations provided in sources patch the vulnerability in XWiki 1...

CVE-2024-1481

CVE-2024-1481 affects FreeIPA and can allow a remote attacker to craft HTTP requests whose parameters are interpreted as kinit arguments on the FreeIPA server, potentially causing a denial of service. Public advisories indicate Red Hat (RHSA-2024:3044), Fedora (FEDORA-2024-d7b9fbb2a5), Rocky Linu...