CVE-2021-24258: Improper Neutralization of Input During Web Page Generation

The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24262: Improper Neutralization of Input During Web Page Generation

The “WooLentor – WooCommerce Elementor Addons + Builder” WordPress Plugin before 1.8.6 has a widget that is vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24264: Improper Neutralization of Input During Web Page Generation

The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24256: Improper Neutralization of Input During Web Page Generation

The “Elementor – Header, Footer & Blocks Template” WordPress Plugin before 1.5.8 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24263: Improper Neutralization of Input During Web Page Generation

The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

PT-2021-15811

Name of the Vulnerable Software and Affected Versions Ultimate Addons for Elementor versions prior to 1.30.0 Description The issue concerns stored Cross-Site Scripting XSS that can be exploited by lower-privileged users, such as contributors, through several widgets in the plugin. This is achieve...

PT-2021-15800

Name of the Vulnerable Software and Affected Versions Livemesh Addons for Elementor versions prior to 6.8 Description The issue concerns stored Cross-Site Scripting XSS that can be exploited by lower-privileged users, such as contributors. The vulnerability is present in several widgets and can b...

PT-2021-15807

Name of the Vulnerable Software and Affected Versions All-in-One Addons for Elementor – WidgetKit versions prior to 2.3.10 Description The issue allows lower-privileged users, such as contributors, to perform stored Cross-Site Scripting XSS attacks. This is possible due to several vulnerable...

CVE-2021-24269: Improper Neutralization of Input During Web Page Generation

The “Sina Extension for Elementor” WordPress Plugin before 3.3.12 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

Aruba ClearPass Policy Manager 安全漏洞

Aruba ClearPass Policy Manager is an application that provides a secure access management system for wireless networks.An information disclosure vulnerability exists in the Aruba ClearPass Policy Manager WEB interface, which can be exploited by remote attackers to submit special requests that can...

WordPress path traversal vulnerability (CNVD-2021-44306)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A path traversal vulnerability exists in WordPress plugin online course solution versions prior to...

CVE-2021-25898

An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Passwords are stored in unencrypted source-code text files. This was noted when accessing the svc-login.php file. The value is used to authenticate a high-privileged user upon authenticating with the server...

CVE-2021-24242

The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed subpage parameter of the plugin's Tools, allowing high privilege users to include any local php file...

CVE-2021-30356

A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files...

Denial of service

A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files...

CVE-2021-30356

A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files...

CVE-2021-30356

A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files...

PT-2021-18718

Name of the Vulnerable Software and Affected Versions Check Point Identity Agent versions prior to R81.018.0000 Description A denial of service issue was reported, which could allow low privileged users to overwrite protected system files. Recommendations For versions prior to R81.018.0000, updat...

CVE-2021-30356: Improper Link Resolution Before File Access

A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files...

WordPress File Upload Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in version 1.0 of the Easy Form Builder WordPress...