10592 matches found
CVE-2024-50465 WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP SEO – Calin Vingan Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 1.6.001...
CVE-2024-50465
CVE-2024-50465 affects WordPress Premium SEO Pack (WP SEO) plugin versions <= 1.6.001. The vulnerability is an SQL Injection due to improper neutralization of special elements in SQL commands. Patchstack and CVE entries indicate the fix is in version 1.6.002. Exploitation details are not provi...
CVE-2024-50453: Relative Path Traversal
Relative Path Traversal vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.0.9...
WordPress plugin Premium SEO Pack SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2024-34228 · Unknown · The Pack Elementor Addons
Name of the Vulnerable Software and Affected Versions: The Pack Elementor addons versions 2.0.9 and earlier Description: A Relative Path Traversal vulnerability in The Pack Elementor addons allows PHP Local File Inclusion. Recommendations: For versions 2.0.9 and earlier, update to a version later...
PT-2024-34241 · Unknown · Wp Seo – Calin Vingan Premium Seo Pack
Name of the Vulnerable Software and Affected Versions: WP SEO – Calin Vingan Premium SEO Pack versions 1.6.001 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...
CVE-2024-50465: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP SEO – Calin Vingan Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 1.6.001...
Fedora: Security Advisory (FEDORA-2024-204d982a2e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-32356
Name of the Vulnerable Software and Affected Versions ffu flash pack affected versions not specified Description The issue is related to an integer overflow in ffu flash pack, which can cause an out of bounds read. This could potentially lead to local information disclosure, requiring System...
WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Premium SEO Pack versions = 1.6.001...
Regular Expression Denial Of Service (ReDoS)
Action Pack is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to inefficient regular expression handling in Action Controller's HTTP Token authentication, which can be triggered by a carefully crafted header, causing significant delays in header parsing...
WordPress The Pack Elementor addons Plugin <= 2.0.9 is vulnerable to Local File Inclusion
Software The Pack Elementor addons Type Plugin Vulnerable versions = 2.0.9 Fixed in 2.1.0 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-50453 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID e424fb066139 Credits João Pedro S Alcânta...
WordPress Premium SEO Pack Plugin <= 1.6.001 is vulnerable to SQL Injection
Software Premium SEO Pack Type Plugin Vulnerable versions = 1.6.001 Fixed in 1.6.002 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50465 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 56b65671a73e Credits Hakiduck Required privilege Contributor...
Security Bulletin: IBM WebSphere Application Server is vulnerable to stored cross-site scripting (CVE-2024-45071)
Summary IBM WebSphere Application Server is vulnerable to stored cross-site scripting in the administrative console. Vulnerability Details CVEID:CVE-2024-45071 DESCRIPTION: IBM WebSphere Application Server is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user t...
Security Bulletin: IBM WebSphere Application Server is vulnerable to an XML External Entity Injection (XXE) vulnerability (CVE-2024-45072)
Summary IBM WebSphere Application Server is vulnerable to an XML External Entity Injection XXE in the administrative console. Vulnerability Details CVEID:CVE-2024-45072 DESCRIPTION: IBM WebSphere Application Server is vulnerable to an XML External Entity Injection XXE attack when processing XML...
The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack on Windows operating systems allows a hacker to exploit their privileges.
The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack on Windows operating systems is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to gain increased privileges...
Mitel MiCollab 访问控制错误漏洞
Mitel MiCollab is a mobile application that provides voice, video, messaging, audio conferencing, and team collaboration for employees from Mitel Canada. A security vulnerability exists in Mitel MiCollab version 9.8 SP1 FP2 9.8.1.201 and prior versions, which stems from a missing authentication...
Security Bulletin: Due to use of International Components for Unicode, IBM Rational ClearQuest is vulnerable to buffer overflow.
Summary Multiple vulnerabilities in International Components for Unicode used within IBM Rational ClearQuest have been addressed CVE-2020-10531, CVE-2011-4599, CVE-2014-8146 Vulnerability Details CVEID:CVE-2020-10531 DESCRIPTION: International Components for Unicode ICU for C/C++ is vulnerable to...
SUSE CVE-2024-41128
Action Pack is a framework for handling and responding to web requests. Starting in version 3.1.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the query parameter filtering routines of Action Dispatch. Carefully crafted query parameters...
SUSE CVE-2024-47887
Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. For applications using HTTP Token authenticatio...