231554 matches found
CVE-2024-0336
CVE-2024-0336 affects EMTA Grup PDKS (V3.04 and earlier, before 20240603). The root cause is Missing Authentication for Critical Function due to Incorrectly Configured Access Control, described as an improper access-control misconfiguration that enables unauthorized access to sensitive functions....
CVE-2024-36728
CVE-2024-36728 affects TRENDnet TEW-827DRU devices up to firmware 2.06B04. The issue is a stack-based buffer overflow in the embedded ssi binary that an authenticated user can trigger by sending a POST to apply.cgi with the action vlan_setting and a sufficiently long dns1 or dns2 key, potentially...
CVE-2024-36729
TRENDnet TEW-827DRU routers (≤2.06B04) contain a stack-based overflow in the ssi binary. An authenticated user can trigger arbitrary code execution by POSTing to apply.cgi via the wizard_ipv6 action with a sufficiently long reboot_type key. The vulnerability affects the ssi binary and is exploita...
CVE-2024-5197
Summary: Multiple connected advisories confirm CVE-2024-5197 affects libvpx with integer overflows in vpx_img_alloc() and vpx_img_wrap(), leading to overflowed buffer calculations and potentially invalid fields in vpx_image_t for versions prior to 1.14.1. The issue is described across Amazon Linu...
CVE-2024-36569
CVE-2024-36569 affects Sourcecodester Gas Agency Management System v1.0. The vulnerability is described as arbitrary code execution via the editClientImage.php file. Documents indicate a high-severity issue (CVSS 8.1, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). Root cause/details are not explicitly pro...
CVE-2024-36568
Sourcecodester Gas Agency Management System v1.0 is vulnerable to SQL Injection via /gasmark/editbrand.php?id=. The root cause is unsanitized input in the id parameter, enabling attackers to manipulate queries. This vulnerability is rated critical (CVSS 3.1: 9.8) with potential impact on confiden...
CVE-2024-35632
CVE-2024-35632 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin suite “Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms” (affected versions up to 1.1.5). The vulnerability can be exploited via forged requests, with a CVSS v3.1 base score of...
CVE-2024-34385
CVE-2024-34385 is a stored XSS vulnerability in the YITH WooCommerce Wishlist plugin for WordPress. It affects versions
CVE-2024-34764
CVE-2024-34764 is marked as rejected by the CVE-Numbering Authority (collision with another CVE). Nevertheless, connected sources show a related vulnerability: Essential Addons for Elementor
CVE-2024-34766
CVE-2024-34766 is an XSS flaw in the ChaosTheory WordPress theme (affected: ChaosTheory <= 1.3). The root cause is improper neutralization of input during web page generation, enabling stored XSS when an authenticated user interacts with or views pages generated by the theme. Public documentat...
CVE-2024-34767
CVE-2024-34767 is a Stored XSS vulnerability in the ShopLentor WordPress plugin (formerly WooLentor), affecting ShopLentor up to version 2.8.7. The root cause is improper input neutralization during web page generation, enabling stored XSS. The vulnerability has a patched status in the connected ...
CVE-2024-34769
CVE-2024-34769 affects the WordPress plugin Elegant Blocks (Elegant Blocks – Amazing Gutenberg Blocks). Root cause: Improper neutralization of input during web page generation, enabling Stored XSS. Affected version range: up to 1.7. Impact: Stored XSS in pages generated by the plugin. Patch statu...
CVE-2024-34770
CVE-2024-34770 is a Stored XSS vulnerability in the Popup Maker WP plugin. The issue arises from improper neutralization of user input during web page generation, allowing embedded malicious payloads to be stored and subsequently reflected to users. Affected products: Popup Maker WP versions up t...
CVE-2024-24919: Check Point’s Quantum Gateway comes under Attack as Hackers exploit Zero-Day Vulnerability
Active Exploits target Check Point Security Gateway Zero-Day Information Disclosure flaw Check Point Cybersecurity has issued hotfixes to address a zero-day vulnerability in its VPNs that has been exploited to gain remote access to firewalls and potentially infiltrate corporate networks. On...
CVE-2024-34789
CVE-2024-34789 affects the WordPress plugin “Post Grid Elementor Addon” (and is listed as vulnerable through v2.0.16). The issue is described as a Stored Cross-Site Scripting (XSS) vulnerability in the addon, specifically involving input during web page generation (XSS via title_tag). Affected ra...
CVE-2024-34790
CVE-2024-34790 is a Stored XSS vulnerability described in the initial and connected records as affecting the WordPress plugin ImageMagick Sharpen Resized Images, with the issue arising from improper input neutralization during web page generation. Public details in the documents indicate affected...
CVE-2024-34791
CVE-2024-34791 : Public documents do not include concrete technical details (affected product/versions/root cause/fix). Monitor for updates.
CVE-2024-34793
CVE-2024-34793 is documented as a Stored XSS vulnerability in the WordPress plugin WP Next Post Navi (affected versions: n/a through 1.8.3). The connected Red Hat and NVD entries confirm the issue and describe it as Improper Neutralization of Input During Web Page Generation leading to Stored XSS...
CVE-2024-34794
CVE-2024-34794 : The connected Wordfence details show a stored XSS vulnerability in the WordPress plugin “Tainacan” (Tainacan plugin) affecting versions n/a through 0.21.3. The vulnerability is described in Wordfence as unAuthenticated Stored Cross‑Site Scripting via a vulnerability in Tainacan, ...