CVE-2023-5775

CVE-2023-5775 : BackWPup for WordPress stores backup destination passwords in plaintext in all versions up to 4.0.2. The root cause is plaintext storage of credentials, enabling an authenticated administrator to retrieve the password from the UI or the options table. Remediation: upgrade to a ver...

CVE-2024-21501

CVE-2024-21501 – sanitize-html information exposure : The sanitize-html package (pre-2.12.1) on the backend with the style attribute enabled can disclose sensitive filesystem and dependency details by enumerating files. Affected: sanitize-html versions before 2.12.1. Impact is information disclos...

CVE-2024-21502

CVE-2024-21502 affects the fastecdsa library prior to 2.3.2. The root cause is a Use of Uninitialized Variable on the stack in the curvemath_mul function (src/curveMath.c), where a value is interpreted as a user-defined type. Depending on the value, an attacker-controlled stack can cause arbitrar...

CVE-2024-1810

The CVE-2024-1810 entry concerns the Archivist – Custom Archive Templates plugin for WordPress. It specifies a Reflected Cross-Site Scripting (XSS) flaw in the shortcode_attributes parameter present in all versions up to and including 1.7.5, caused by insufficient input sanitization and output es...

CVE-2024-22395

CVE-2024-22395 affects SonicWall SMA100 SSL-VPN (virtual office portal). The vulnerability is an improper access control issue that could allow a remote authenticated attacker to associate another user’s MFA mobile application. Affected product: SMA100 SSL-VPN (SMA 100 series). Root cause: access...

Spoofing

Microsoft Edge Chromium-based Spoofing Vulnerability...

Design/Logic Flaw

An issue in zkteco zkbio WDMS v.8.0.5 allows an attacker to execute arbitrary code via the /files/backup/ component...

Information disclosure

Microsoft Edge Chromium-based Information Disclosure Vulnerability...

CVE-2024-26188

CVE-2024-26188 (Microsoft Edge, Chromium-based) — Spoofing vulnerability affecting Edge for desktop/mobile (Chromium-based). Affected component: browser UI spoofing vector, with underlying issue described as spoofing vulnerability in Edge’s Chromium-based engine. CVSS 3.1: Network attack, no priv...

CVE-2024-26192

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-26192) affects the Edge Chromium-based browser. Connected sources confirm the vulnerability is a information disclosure flaw in Edge that can expose sensitive data via the browser’s components; CVSS 3.1 vector indicate...

Design/Logic Flaw

In the module "Survey TMA" ecomizsurveytma up to version 2.0.0 from Ecomiz for PrestaShop, a guest can download personal information without restriction...

Information disclosure

Microsoft Edge Chromium-based Information Disclosure Vulnerability...

CVE-2024-21423

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-21423) affects Edge Chrome-based builds. The provided data show an Information Disclosure issue with CVSS v3.1: network attack vector, high attack complexity, no privileges required, no user interaction, scope unchange...

Open redirect

Rejected reason: This is unused...

Open redirect

Rejected reason: This is unused...

Open redirect

Rejected reason: This is unused...

Open redirect

Rejected reason: This is unused...

Open redirect

Rejected reason: This is unused...

Open redirect

Rejected reason: This is unused...

Open redirect

Rejected reason: This is unused...