by Kastro CVE-2024-55557 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,101 matching vulnerabilities · Page 384 of 783
mitre
CVE-2024-55085 · mitre
GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which…
CVE-2024-29671 · mitre
Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST reques…
CVE-2024-55969 · mitre
DocIO in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 throws XMLException during the resaving of a DOCX document with an ex…
CVE-2023-29476 · mitre
In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malformed client requests.
Designinvento
appsplate
azzaroco
CVE-2024-9290 · azzaroco Super Backup & Clone - Migrate for WordPress
Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload
sidngr
CVE-2024-54262 · sidngr Import Export For WooCommerce
WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerability
richteam
CVE-2024-55982 · richteam Share Buttons – Social Media
WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability
Chunghwa Telecom
CVE-2024-12641 · Chunghwa Telecom TenderDocTransfer
Chunghwa Telecom TenderDocTransfer - Reflected Cross-site Scripting to RCE
chriscarvache
CVE-2024-55972 · chriscarvache eTemplates
WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerability
Cool Plugins
CVE-2023-36681 · Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List
WordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerability
mikeleembruggen
CVE-2024-55976 · mikeleembruggen Critical Site Intel
WordPress Critical Site Intel plugin <= 1.0 - SQL Injection vulnerability
Amol Nirmala Waman
CVE-2024-55988 · Amol Nirmala Waman Navayan CSV Export
WordPress Navayan CSV Export Plugin <= 1.0.9 - SQL Injection vulnerability
Appgenix Infotech
CVE-2024-54294 · Appgenix Infotech Firebase OTP Authentication
WordPress Firebase OTP Authentication plugin <= 1.0.1 - Account Takeover vulnerability
Codexpert, Inc
CVE-2024-54296 · Codexpert, Inc CoSchool LMS
WordPress CoSchool LMS plugin <= 1.4.3 - Account Takeover vulnerability
dugudlabs
CVE-2024-54239 · dugudlabs Eyewear prescription form
WordPress Eyewear prescription form plugin <= 4.0.18 - Arbitrary Option Update to Privilege Escalation vulnerability
extremeidea
CVE-2024-54297 · extremeidea vBSSO-lite
WordPress vBSSO-lite plugin <= 1.4.3 - Account Takeover vulnerability
FluxBuilder
CVE-2024-54295 · FluxBuilder ListApp Mobile Manager
WordPress ListApp Mobile Manager plugin <= 1.7.7 - Account Takeover vulnerability
Nabajit Roy
CVE-2024-55981 · Nabajit Roy Nabz Image Gallery
WordPress Nabz Image Gallery plugin <= v1.00 - SQL Injection vulnerability
wpdirectorykit.com
CVE-2023-41875 · wpdirectorykit.com WP Directory Kit
WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability
bmad4ever
CVE-2024-21576 · bmad4ever ComfyUI-Bmad-Nodes
ComfyUI-Bmad-Nodes is vulnerable to Code Injection.
CE21
HK Digital Agency LLC
CVE-2024-54261 · HK Digital Agency LLC TAX SERVICE Electronic HDM
WordPress TAX SERVICE Electronic HDM plugin <= 1.2.2 - SQL Injection vulnerability
PickPlugins
SuitePlugins
CVE-2024-54370 · SuitePlugins Video & Photo Gallery for Ultimate Member
WordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.0 - Arbitrary File Upload vulnerability
supsystic.com
CVE-2023-39997 · supsystic.com Popup by Supsystic
WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerability
Survey Maker team
CVE-2023-22697 · Survey Maker team Survey Maker
WordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerability
Syed Balkhi
CVE-2023-40005 · Syed Balkhi Easy Digital Downloads
WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control
Dell
CVE-2024-28980 · Dell RecoverPoint for Virtual Machines
Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH.
CVE-2024-48007 · Dell RecoverPoint for Virtual Machines
Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability.
CVE-2024-38488 · Dell RecoverPoint for Virtual Machines
Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability.
robindkumar
CVE-2024-55980 · robindkumar Wr Age Verification
WordPress Wr Age Verification plugin <= 2.0.0 - SQL Injection vulnerability
WalletStation
CVE-2024-55978 · WalletStation Code Generator Pro
WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability
JS Help Desk
CVE-2022-46838 · JS Help Desk JS Help Desk – Best Help Desk & Support Plugin
WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability
PlexTrac
CVE-2024-11837 · PlexTrac PlexTrac
N1QL Injection
CVE-2024-11838 · PlexTrac PlexTrac
Local File Inclusion
RTI
Strategy11 Form Builder Team
CVE-2022-45806 · Strategy11 Form Builder Team Formidable Forms
WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability
weDevs
wpjobportal
CVE-2024-11715 · wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
WP Job Portal <= 2.2.2 - Missing Authorization to Limited Privilege Escalation
BinaryCarpenter
CVE-2024-55977 · BinaryCarpenter LaunchPage.app Importer
WordPress LaunchPage.app Importer plugin <= 1.1 - SQL Injection vulnerability
wp-buy
CVE-2024-54234 · wp-buy Limit Login Attempts
WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability
lizeipe
CVE-2024-56012 · lizeipe Flash News / Post (Responsive)