Rezultati pretraživanja za 'Od datuma: 14.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-9678 | 4.9 | An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading to command execution. | 2024-12-16 07:15:06 | 2024-12-16 07:15:06 |
| CVE-2024-12646 | 8.1 | The topm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthent | 2024-12-16 07:15:06 | 2024-12-16 07:15:06 |
| CVE-2024-12645 | 6.5 | The topm-client from Chunghwa Telecom has an Arbitrary File Read vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenti | 2024-12-16 07:15:06 | 2024-12-16 07:15:06 |
| CVE-2024-12644 | 7.1 | The tbm-client from Chunghwa Telecom has an Arbitrary File vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated r | 2024-12-16 07:15:06 | 2024-12-16 07:15:06 |
| CVE-2024-12643 | 8.1 | The tbm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenti | 2024-12-16 07:15:06 | 2024-12-16 07:15:06 |
| CVE-2024-56083 | - | Cognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomly_generated_string.devinapps.com URL (aka the VSCode live share URL) for a specific "Use Devin's Machine" session. For example, thi | 2024-12-16 03:15:04 | 2024-12-16 03:15:04 |
| CVE-2024-12628 | 4.4 | The bodi0`s Easy cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cache-folder' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for | 2024-12-14 07:15:07 | 2024-12-14 07:15:07 |
| CVE-2024-12446 | 6.4 | The Post to Pdf plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gmptp_single_post' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied att | 2024-12-14 07:15:07 | 2024-12-14 07:15:07 |
| CVE-2024-12501 | 6.4 | The Simple Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This | 2024-12-14 06:15:19 | 2024-12-14 06:15:19 |
| CVE-2024-12474 | 6.4 | The GeoDataSource Country Region DropDown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gds-country-dropdown' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and outpu | 2024-12-14 06:15:19 | 2024-12-14 06:15:19 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12329
Zapisa po stranici: