Rezultati pretraživanja za 'Od datuma: 14.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-10772 | 8.8 | Since the firmware update is not validated, an attacker can install modified firmware on the device. This has a high impact on the availabilty, integrity and confidentiality up to the complete compromise of the device. | 2024-12-06 13:15:05 | 2024-12-06 13:15:05 |
| CVE-2024-10771 | 8.8 | Due to missing input validation during one step of the firmware update process, the product is vulnerable to remote code execution. With network access and the user level ”Service”, an attacker can execute arbitrary system commands in the root user’s | 2024-12-06 13:15:04 | 2024-12-06 13:15:04 |
| CVE-2024-11460 | 7.5 | The Verowa Connect plugin for WordPress is vulnerable to SQL Injection via the 'search_string' parameter in all versions up to, and including, 3.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the | 2024-12-06 10:15:05 | 2024-12-06 10:15:05 |
| CVE-2024-11289 | 8.1 | The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.5.9 via several functions like penci_archive_more_post_ajax_func, penci_more_post_ajax_func, and penci_more_featured_post_ajax_func. This ma | 2024-12-06 10:15:05 | 2024-12-06 10:15:05 |
| CVE-2024-10909 | 6.3 | The The Pojo Forms plugin for WordPress is vulnerable to arbitrary shortcode execution via form_preview_shortcode AJAX action in all versions up to, and including, 1.4.7. This is due to the software allowing users to execute an action that does not p | 2024-12-06 10:15:05 | 2024-12-06 10:15:05 |
| CVE-2024-10681 | 6.3 | The The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.0.51. This is due to the software allowin | 2024-12-06 10:15:04 | 2024-12-06 10:15:04 |
| CVE-2024-9866 | 5.4 | The Event Tickets with Ticket Scanner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameters in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping and missing autho | 2024-12-06 09:15:08 | 2024-12-06 09:15:08 |
| CVE-2024-12155 | 9.8 | The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the settings_import() function in all versions up to, and including, 2.0.02. This m | 2024-12-06 09:15:08 | 2024-12-06 09:15:08 |
| CVE-2024-12110 | 4.3 | The Gold Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate() and deactivate() functions in all versions up to, and including, 1.3.2. This makes it possible f | 2024-12-06 09:15:08 | 2024-12-06 09:15:08 |
| CVE-2024-12060 | 6.1 | The WP Media Optimizer (.webp) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘wpmowebp-css-resources’ and 'wpmowebp-js-resources' parameters in all versions up to, and including, 1.4.0 due to insufficient input sanitiza | 2024-12-06 09:15:08 | 2024-12-06 09:15:08 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13148
Zapisa po stranici: