PT-2024-34908 · Sanjaysolutions · Sanjaysolutions Loginplus

Name of the Vulnerable Software and Affected Versions: Sanjaysolutions Loginplus versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations:...

PT-2024-34621 · Unknown · Open Floodlight Sdn Controller

Name of the Vulnerable Software and Affected Versions: Floodlight SDN OpenFlow Controller version 1.2 Description: The issue allows local hosts to construct false broadcast ports, causing inter-host communication anomalies. Recommendations: For Floodlight SDN OpenFlow Controller version 1.2,...

PT-2024-33581 · Unknown · Piyushmca Shipyaari Shipping Management

Name of the Vulnerable Software and Affected Versions: Piyushmca Shipyaari Shipping Management versions 1.2 and earlier Description: The Deserialization of Untrusted Data issue in Piyushmca Shipyaari Shipping Management allows Object Injection. This permits an attacker to inject malicious objects...

WordPress plugin Shipyaari Shipping Management 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2024-39656 · Unknown · Upkeeper Instant Privilege Access

Name of the Vulnerable Software and Affected Versions: upKeeper Instant Privilege Access versions prior to 1.2 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in upKeeper Instant Privilege Access. Recommendations: For versions prior to 1.2, update...

WordPress Logo Carousel – Clients logo carousel for WP Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Logo Carousel – Clients logo carousel for WP Type Plugin Vulnerable versions = 1.2 Fixed in 1.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47631 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c59f3b8fd57a Credits Khalid Yusu...

WordPress plugin The Simple Spoiler 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection vulnerability exists...

WordPress NinjaTeam Header Footer Custom Code Plugin < 1.2 is vulnerable to Cross Site Scripting (XSS)

Software NinjaTeam Header Footer Custom Code Type Plugin Vulnerable versions 1.2 Fixed in 1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6493 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 618713328f1e Credits Takshal...

CVE-2024-7766

The Adicon Server WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2024-7015

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse.This issue affects PassBox: before v1.2...

PassBox 访问控制错误漏洞

PassBox is an application from PassBox, Inc. An access control error vulnerability exists in PassBox prior to version 1.2 that stems from incorrect authentication...

ClamAV 安全漏洞

ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A security vulnerability exists in ClamAV that stems from allowing the ClamD process to write to its log files under...

Dell Path to PowerProtect 安全漏洞

Dell Path to PowerProtect is an application from Dell USA Inc. A security vulnerability exists in Dell Path to PowerProtect version 1.1 and 1.2. An unauthorized attacker could exploit the vulnerability to obtain personal information...

WordPress Amelia plugin <= 1.2 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Amelia versions = 1.2...

WordPress Amelia Plugin <= 1.2 is vulnerable to Sensitive Data Exposure

Software Amelia Type Plugin Vulnerable versions = 1.2 Fixed in 1.2.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6552 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 963ab0b19e24 Credits stealthcopter Required privilege...

PT-2024-37709 · WordPress · Amelia

Name of the Vulnerable Software and Affected Versions: The Booking for Appointments and Events Calendar – Amelia plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Full Path Disclosure, which occurs because the plugin utilizes Symfony and has display erro...

WordPress plugin Amelia 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Korenix JetPort 5601 操作系统命令注入漏洞

The Korenix JetPort 5601 is an intelligent serial device server from Korenix. A security vulnerability exists in the Korenix JetPort 5601 version 1.2 and earlier, which is caused by command injection due to improper special character filtering...

Korenix JetPort 5601 操作系统命令注入漏洞

The Korenix JetPort 5601 is an intelligent serial device server from Korenix. A security vulnerability exists in Korenix JetPort 5601 version 1.2 and earlier, which stems from an authentication bypass vulnerability that allows an attacker to access features on the device without specifying a...

WordPress WP Total Branding Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Total Branding Type Plugin Vulnerable versions = 1.2 Fixed in 1.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6625 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a7d5303cf6ee Credits Artem Polynko Artem Polynk...