Rezultati pretraživanja za 'Od datuma: 09.09.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-8662 | 6.1 | The Koko Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3.12. This makes it possible for unauthenticated a | 2024-09-27 12:54:36 | 2024-09-24 02:15:04 |
| CVE-2022-2446 | 7.2 | The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9. This makes it possible for authenticated attackers with administrative privileges to | 2024-09-27 01:09:05 | 2024-09-13 15:15:13 |
| CVE-2024-5869 | 5.4 | The Neighborly theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This mak | 2024-09-27 01:06:16 | 2024-09-13 15:15:15 |
| CVE-2024-8241 | 5.4 | The Nova Blocks by Pixelgrade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute of the 'wp:separator' Gutenberg block in all versions up to, and including, 2.1.7 due to insufficient input sanitization and out | 2024-09-26 22:03:42 | 2024-09-10 10:15:13 |
| CVE-2023-2919 | 4.3 | The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4. This is due to missing or incorrect nonce validation on the 'addon_enable_disable' function. This makes it possible for unauthenti | 2024-09-26 21:59:24 | 2024-09-10 10:15:05 |
| CVE-2024-39589 | 7.5 | Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attac | 2024-09-26 21:36:12 | 2024-09-18 15:15:15 |
| CVE-2024-39590 | 7.5 | Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attac | 2024-09-26 21:02:14 | 2024-09-18 15:15:15 |
| CVE-2024-36981 | 7.5 | An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a | 2024-09-26 20:55:39 | 2024-09-18 15:15:15 |
| CVE-2024-36980 | 7.5 | An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a | 2024-09-26 20:53:57 | 2024-09-18 15:15:14 |
| CVE-2024-34026 | 9.8 | A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker | 2024-09-26 20:52:39 | 2024-09-18 15:15:14 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13732
Zapisa po stranici: