Rezultati pretraživanja za 'Od datuma: 20.07.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-7651 | 5.6 | The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injection via the ‘app-builder-search’ parameter in all versions up to, and including, 4.2.6 due to insufficient escaping on the user s | 2024-08-21 12:30:33 | 2024-08-21 06:15:12 |
| CVE-2024-7134 | 7.2 | The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘form_data’ parameter in all versions up to, and including, 3.3.78 due to insufficient input sanitization and output e | 2024-08-21 12:30:33 | 2024-08-21 06:15:11 |
| CVE-2024-7090 | 6.1 | The LH Add Media From Url plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘lh_add_media_from_url-file_url’ parameter in all versions up to, and including, 1.23 due to insufficient input sanitization and output escaping. T | 2024-08-21 12:30:33 | 2024-08-21 06:15:10 |
| CVE-2024-7013 | 7.8 | Stack-based buffer overflow in Control FPWIN Pro version 7.7.2.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file. | 2024-08-21 12:30:33 | 2024-08-21 06:15:09 |
| CVE-2024-6767 | 5.5 | The WordSurvey plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sounding_title’ parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for authe | 2024-08-21 12:30:33 | 2024-08-21 06:15:08 |
| CVE-2024-6568 | 5.3 | The Flamix: Bitrix24 and Contact Form 7 integrations plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.1.0. This is due the plugin utilizing mobiledetect without preventing direct access to the files. | 2024-08-21 12:30:33 | 2024-08-21 06:15:08 |
| CVE-2024-5880 | 4.3 | The Hide My Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 due to the plugin not restricting access to the REST API when password protection is enabled. This makes it possible for u | 2024-08-21 12:30:33 | 2024-08-21 06:15:07 |
| CVE-2024-43403 | 8.8 | Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator, which is bound with a ClusterRole called edit via ClusterRoleBinding. The "edit" ClusterRole is one of Kubernetes default-created | 2024-08-21 12:30:33 | 2024-08-20 22:15:04 |
| CVE-2024-42363 | 8.8 | Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the RoleConfigFile initializer and then into the Kubernetes::Util.parse_file method where it is uns | 2024-08-21 12:30:33 | 2024-08-20 21:15:14 |
| CVE-2024-35214 | - | A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially uninstall CylanceOPTICS from a system thereby leaving it with only the protection of Cyla | 2024-08-21 12:30:33 | 2024-08-20 18:15:08 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/14360
Zapisa po stranici: