21069 matches found
CVE-2024-38717
Booking Ultra Pro Appointments Booking Calendar Plugin (WordPress)
Adobe Premiere Pro Untrusted Search Path Vulnerability
Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. An untrusted search path vulnerability exists in Adobe Premiere Pro, which can be exploited by an attacker to execute code in the context of the current user...
PT-2024-28162 · Unknown · Booking Ultra Pro
Name of the Vulnerable Software and Affected Versions: Booking Ultra Pro versions 1.1.13 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion in Booking Ultra Pro...
WordPress plugin Booking Ultra Pro path traversal vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A path traversal...
CVE-2024-32753 TYCO Illustra Pro Gen 4 - JQuery version
Under certain circumstances the camera may be susceptible to known vulnerabilities associated with the JQuery versions prior to 3.5.0 third-party component...
CVE-2024-32753 TYCO Illustra Pro Gen 4 - JQuery version
Under certain circumstances the camera may be susceptible to known vulnerabilities associated with the JQuery versions prior to 3.5.0 third-party component...
WordPress Packlink PRO shipping module plugin <= 3.4.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dhabaleshwar Das in WordPress Plugin Packlink PRO shipping module versions = 3.4.6...
WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Uncanny Automator Pro versions = 5.3...
WordPress Booking Ultra Pro Appointments Booking Calendar plugin <= 1.1.13 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Booking Ultra Pro versions = 1.1.13...
WordPress Uncanny Automator Pro Plugin <= 5.3 is vulnerable to Cross Site Scripting (XSS)
Software Uncanny Automator Pro Type Plugin Vulnerable versions = 5.3 Fixed in 5.3.0.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37117 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9c1cb610bb3a Credits Dave Jong Patchstack...
WordPress Packlink PRO shipping module Plugin <= 3.4.6 is vulnerable to Broken Access Control
Software Packlink PRO shipping module Type Plugin Vulnerable versions = 3.4.6 Fixed in 3.4.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38740 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID fbec632c2a75 Credits Dhabaleshwar Das...
Johnson Controls Illustra Pro Gen 4 Security Vulnerability
Johnson Controls Illustra Pro Gen 4 is a series of surveillance probes from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls Illustra Pro Gen 4 Camera SS016.05.03.01.0010 and prior versions, which stems from a dependency on vulnerable third-party components...
WordPress Booking Ultra Pro Plugin <= 1.1.13 is vulnerable to Local File Inclusion
Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.13 Fixed in 1.1.14 OWASP Top 10 A5: Security Misconfiguration Classification Local File Inclusion CVE CVE-2024-38717 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c00579e5a889 Credits Ananda Dhakal...
WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Booking Ultra Pro versions = 1.1.13...
WordPress Caxton – Create Pro page layouts in Gutenberg plugin <= 1.30.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Caxton – Create Pro page layouts in Gutenberg versions = 1.30.1...
WordPress Caxton – Create Pro page layouts in Gutenberg Plugin <= 1.30.1 is vulnerable to Cross Site Scripting (XSS)
Software Caxton – Create Pro page layouts in Gutenberg Type Plugin Vulnerable versions = 1.30.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37948 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 26592554426e Credits Ngô Thiên...
WordPress Booking Ultra Pro Plugin <= 1.1.13 is vulnerable to Cross Site Scripting (XSS)
Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.13 Fixed in 1.1.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38676 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5502b7d4c80c Credits LVT-tholv2k Required privilege...
Adobe Premiere Pro < 23.6.7 / 24.0.0 < 24.5.0 Arbitrary code execution (APSB24-46)
The version of Adobe Premiere Pro installed on the remote Windows host is prior to 23.6.7, 24.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB24-46 advisory. - Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that...
Adobe Premiere Pro < 23.6.7 / 24.0.0 < 24.5.0 Arbitrary code execution (APSB24-46) (macOS)
The version of Adobe Premiere Pro installed on the remote macOS host is prior to 23.6.7, 24.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB24-46 advisory. - Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that...
