Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-37123 | 5.3 | Missing Authorization vulnerability in VowelWeb Ibtana allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from n/a through 1.2.3.3. | 2024-11-01 20:24:53 | 2024-11-01 15:15:19 |
| CVE-2024-37108 | 7.7 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WishList Products WishList Member X allows Path Traversal.This issue affects WishList Member X: from n/a through 3.26.6. | 2024-11-01 20:24:53 | 2024-11-01 15:15:19 |
| CVE-2024-37106 | 8.2 | Missing Authorization vulnerability in WishList Products WishList Member X allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WishList Member X: from n/a through 3.26.6 | 2024-11-01 20:24:53 | 2024-11-01 15:15:18 |
| CVE-2024-37096 | 4.3 | Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1. | 2024-11-01 20:24:53 | 2024-11-01 15:15:18 |
| CVE-2024-37095 | 4.3 | Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/a through 1.8.7.3. | 2024-11-01 20:24:53 | 2024-11-01 15:15:18 |
| CVE-2024-10367 | 6.4 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 3.0.4 due to insufficient input sanitiz | 2024-11-01 12:57:03 | 2024-11-01 11:15:12 |
| CVE-2024-10652 | 6.1 | IDExpert from CHANGING Information Technology does not properly validate a parameter for a specific functionality, allowing unauthenticated remote attackers to inject JavsScript code and perform Reflected Cross-site scripting attacks. | 2024-11-01 12:57:03 | 2024-11-01 10:15:04 |
| CVE-2024-10651 | 4.9 | IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read arbitrary system files. | 2024-11-01 12:57:03 | 2024-11-01 10:15:04 |
| CVE-2024-10232 | 6.4 | The Group Chat & Video Chat by AtomChat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's atomchat shortcode in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping on us | 2024-11-01 12:57:03 | 2024-11-01 10:15:03 |
| CVE-2024-7424 | 5.4 | The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access to data due to a missing capability check on several functions in all versions up to, and including, 4.0.1. This makes it possible | 2024-11-01 12:57:03 | 2024-11-01 08:15:11 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13102
Zapisa po stranici: