DedeCMS - Open Redirect via download.php

Dedecms 5.71sp1 and earlier contain a URL redirect caused by a logic error that does not properly validate GET request input, letting attackers redirect users to arbitrary URLs, exploit requires sending crafted GET requests. id: CVE-2024-57241 info: name: DedeCMS - Open Redirect via download.php...

LOLLMS WebUI - Absolute Path Traversal

An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the openfile endpoint of lollmsadvanced.py. The sanitizepath function with allowabsolutepath=True allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can...

Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting

WP Sunshine Sunshine Photo Cart versions up to 3.1.1 contain a cross-site scripting caused by improper neutralization of input during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-30194 info:...

Tube Video Ads Lite - Reflected XSS

Tube Video Ads Lite WordPress plugin = 1.5.7 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craf...

Landray EKP - Path Traversal

A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sysuicomponent/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible to...

ROOT-APP-MAVEN-CVE-2024-22259 CVE-2024-22259 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22259 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38820 CVE-2024-38820 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-38820 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38816 CVE-2024-38816 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2024-38816 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-29415 CVE-2024-29415 in ip - Patched by Root

Root has patched CVE-2024-29415 in the ip package for Root:npm. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-43374 CVE-2024-43374 in vim - Patched by Root

Root has patched CVE-2024-43374 in the vim package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-22667 CVE-2024-22667 in vim - Patched by Root

Root has patched CVE-2024-22667 in the vim package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-23638 CVE-2024-23638 in squid - Patched by Root

Root has patched CVE-2024-23638 in the squid package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-37894 CVE-2024-37894 in squid - Patched by Root

Root has patched CVE-2024-37894 in the squid package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-41946 CVE-2024-41946 in ruby-rexml - Patched by Root

Root has patched CVE-2024-41946 in the ruby-rexml package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-12797 CVE-2024-12797 in openssl - Patched by Root

Root has patched CVE-2024-12797 in the openssl package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-3935 CVE-2024-3935 in mosquitto - Patched by Root

Root has patched CVE-2024-3935 in the mosquitto package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2024-10525 CVE-2024-10525 in mosquitto - Patched by Root

Root has patched CVE-2024-10525 in the mosquitto package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2024-8376 CVE-2024-8376 in mosquitto - Patched by Root

Root has patched CVE-2024-8376 in the mosquitto package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-319-CVE-2024-41957 CVE-2024-41957 in vim - Patched by Root

Root has patched CVE-2024-41957 in the vim package for Root:Alpine:3.19. Multiple fixed versions available...

ROOT-OS-ALPINE-319-CVE-2024-43374 CVE-2024-43374 in vim - Patched by Root

Root has patched CVE-2024-43374 in the vim package for Root:Alpine:3.19. Multiple fixed versions available...