Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 15.12.2024.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2024-54354 6.5 Missing Authorization vulnerability in Beat Kueffer Termin-Kalender allows Stored XSS.This issue affects Termin-Kalender: from n/a through 0.99.47. 2024-12-16 15:15:08
CVE-2024-54353 7.1 Cross-Site Request Forgery (CSRF) vulnerability in WPGear Hack-Info allows Stored XSS.This issue affects Hack-Info: from n/a through 3.17. 2024-12-16 15:15:07
CVE-2024-54352 8.8 Cross-Site Request Forgery (CSRF) vulnerability in Sabri Taieb Sogrid allows Privilege Escalation.This issue affects Sogrid: from n/a through 1.5.2. 2024-12-16 15:15:07
CVE-2024-54332 7.1 Cross-Site Request Forgery (CSRF) vulnerability in WPFactory WP Currency Exchange Rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through 1.2.0. 2024-12-16 15:15:07
CVE-2024-54331 7.1 Cross-Site Request Forgery (CSRF) vulnerability in Micha I Plant A Tree allows Stored XSS.This issue affects I Plant A Tree: from n/a through 1.7.3. 2024-12-16 15:15:07
CVE-2024-37251 4.3 Cross-Site Request Forgery (CSRF) vulnerability in WPENGINE, INC. Advanced Custom Fields PRO.This issue affects Advanced Custom Fields PRO: from n/a before 6.3.2. 2024-12-16 15:15:06
CVE-2024-9679 5.3 A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials. 2024-12-16 07:15:07
CVE-2024-9678 4.9 An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading to command execution. 2024-12-16 07:15:06
CVE-2024-12646 8.1 The topm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthent 2024-12-16 07:15:06
CVE-2024-12645 6.5 The topm-client from Chunghwa Telecom has an Arbitrary File Read vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenti 2024-12-16 07:15:06
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/12324
Zapisa po stranici: