13631 matches found
LOLLMS WebUI - Absolute Path Traversal
An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the openfile endpoint of lollmsadvanced.py. The sanitizepath function with allowabsolutepath=True allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can...
Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting
WP Sunshine Sunshine Photo Cart versions up to 3.1.1 contain a cross-site scripting caused by improper neutralization of input during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-30194 info:...
Tube Video Ads Lite - Reflected XSS
Tube Video Ads Lite WordPress plugin = 1.5.7 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craf...
Landray EKP - Path Traversal
A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sysuicomponent/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible to...
DedeCMS - Open Redirect via download.php
Dedecms 5.71sp1 and earlier contain a URL redirect caused by a logic error that does not properly validate GET request input, letting attackers redirect users to arbitrary URLs, exploit requires sending crafted GET requests. id: CVE-2024-57241 info: name: DedeCMS - Open Redirect via download.php...
ROOT-OS-ALPINE-315-CVE-2024-4741 CVE-2024-4741 in openssl - Patched by Root
Root has patched CVE-2024-4741 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-52560 CVE-2024-52560 in linux - Patched by Root
Root has patched CVE-2024-52560 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-56639 CVE-2024-56639 in linux - Patched by Root
Root has patched CVE-2024-56639 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-57809 CVE-2024-57809 in linux - Patched by Root
Root has patched CVE-2024-57809 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-57922 CVE-2024-57922 in linux - Patched by Root
Root has patched CVE-2024-57922 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-58100 CVE-2024-58100 in linux - Patched by Root
Root has patched CVE-2024-58100 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-57875 CVE-2024-57875 in linux - Patched by Root
Root has patched CVE-2024-57875 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-57976 CVE-2024-57976 in linux - Patched by Root
Root has patched CVE-2024-57976 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-58090 CVE-2024-58090 in linux - Patched by Root
Root has patched CVE-2024-58090 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-58054 CVE-2024-58054 in linux - Patched by Root
Root has patched CVE-2024-58054 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-57852 CVE-2024-57852 in linux - Patched by Root
Root has patched CVE-2024-57852 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-52559 CVE-2024-52559 in linux - Patched by Root
Root has patched CVE-2024-52559 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-58015 CVE-2024-58015 in linux - Patched by Root
Root has patched CVE-2024-58015 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...