CVEs published March 27, 2024
285 CVEs were published on March 27, 2024: 11 critical, 112 high. Browse them by severity, product and exploitation status.
- Published
- 285
- Critical
- 11
- High
- 112
- Medium
- 148
- Low
- 10
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 23
Most affected products
- Campcodes Online Examination System
- 8
- Cisco IOS XE Software
- 8
- Tenda FH1202
- 8
- Tenda FH1203
- 7
- Cisco IOS
- 5
- code-projects Online Book System
- 5
- https://elementor.com/ Elementor Website Builder Pro
- 5
- nvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- 5
- Tenda FH1205
- 5
- curl
- 4
Critical 11
- CVE-2023-6153Authentication Bypass in TeoSOFT Software TeoBASETeoSOFT Software TeoBASE
- CVE-2023-6173SQLi in TeoSOFT Software TeoBASETeoSOFT Software TeoBASE
- CVE-2023-49815WordPress WappPress plugin <= 5.0.3 - Unauthenticated Arbitrary File Upload vulnerabilityWappPress Team WappPress
- CVE-2023-31634In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data.
- CVE-2023-45924libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen().
- CVE-2023-45927S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().
- CVE-2023-45929S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().
- CVE-2024-25393A stack buffer overflow occurs in net/at/src/at_server.c in RT-Thread through 5.0.2.
- CVE-2024-25735An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.
- CVE-2024-28335Lektor before 3.3.11 does not sanitize DB path traversal.lektor
- CVE-2024-28815A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive…
High 112
- CVE-2024-3010Tenda FH1205 setcfm formSetCfm stack-based overflowTenda FH1205
- CVE-2024-0980The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code.Okta Verify for Windows
- CVE-2024-3008Tenda FH1205 execCommand formexeCommand stack-based overflowTenda FH1205
- CVE-2024-3007Tenda FH1205 NatStaticSetting fromNatStaticSetting stack-based overflowTenda FH1205
- CVE-2024-3006Tenda FH1205 fromRouteStatic fromSetRouteStatic stack-based overflowTenda FH1205
- CVE-2024-0077CVEnvidia vGPU driver, Cloud Gaming driver
- CVE-2024-0074CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-0073CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-0071CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-3000code-projects Online Book System index.php sql injectioncode-projects Online Book System
- CVE-2024-2994Tenda FH1203 GetParentControlInfo stack-based overflowTenda FH1203
- CVE-2024-2993Tenda FH1203 QuickIndex formQuickIndex stack-based overflowTenda FH1203
- CVE-2024-29891ZITADEL Improper Content-Type Validation Leads to Account Takeover via Stored XSS + CSP Bypasszitadel · github.com/zitadel/zitadel
- CVE-2024-2992Tenda FH1203 setcfm formSetCfm stack-based overflowTenda FH1203
- CVE-2024-29887Serverpod client accepts any certificateserverpod
- CVE-2024-28860Insecure IPsec transport encryption in Ciliumcilium · github.com/cilium/cilium
- CVE-2024-2990Tenda FH1203 execCommand formexeCommand stack-based overflowTenda FH1203
- CVE-2024-28247Pihole Authenticated Arbitrary File Read with root privilegespi-hole
- CVE-2024-28233XSS in JupyterHub via Self-XSS leveraged by Cookie Tossingjupyterhub
- CVE-2024-2989Tenda FH1203 NatStaticSetting fromNatStaticSetting stack-based overflowTenda FH1203
- CVE-2024-2988Tenda FH1203 fromRouteStatic fromSetRouteStatic stack-based overflowTenda FH1203
- CVE-2024-20308A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote…Cisco IOS
- CVE-2023-0582Path Traversal in ForgeRock Access Managmentforgerock access management
- CVE-2024-20271A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a…Cisco Aironet Access Point Software · Cisco Business Wirele…
- CVE-2024-20303A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an…Cisco IOS XE Software
Show all 112 entriesShow fewer entries
- CVE-2024-2987Tenda FH1202 GetParentControlInfo stack-based overflowTenda FH1202
- CVE-2024-20314A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an…Cisco IOS XE Software
- CVE-2024-20312A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could…Cisco IOS
- CVE-2024-20259A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected…Cisco IOS XE Software
- CVE-2024-20276A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause…Cisco IOS
- CVE-2024-20311A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an…Cisco IOS
- CVE-2024-2986Tenda FH1202 SetSpeedWan formSetSpeedWan stack-based overflowTenda FH1202
- CVE-2024-2985Tenda FH1202 QuickIndex formQuickIndex stack-based overflowTenda FH1202
- CVE-2024-29945Splunk Authentication Token Exposure in Debug Log in Splunk EnterpriseSplunk Enterprise
- CVE-2024-29946Risky command safeguards bypass in Dashboard Examples HubSplunk Enterprise · Splunk Cloud Platform
- CVE-2024-2984Tenda FH1202 setcfm formSetCfm stack-based overflowTenda FH1202
- CVE-2024-2983Tenda FH1202 SetClientState formSetClientState stack-based overflowTenda FH1202
- CVE-2024-1540Command Injection in gradio-app/gradio via deploy+test-visual.yml workflowgradio-app/gradio
- CVE-2024-2981Tenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowTenda FH1202
- CVE-2024-2980Tenda FH1202 execCommand formexeCommand stack-based overflowTenda FH1202
- CVE-2024-2979Tenda F1203 openSchedWifi setSchedWifi stack-based overflowTenda F1203
- CVE-2024-2978Tenda F1203 setcfm formSetCfm stack-based overflowTenda F1203
- CVE-2024-30238WordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerabilityWasiliy Strecker / ContestGallery developer Contest Gallery
- CVE-2024-2977Tenda F1203 QuickIndex formQuickIndex stack-based overflowTenda F1203
- CVE-2024-2976Tenda F1203 execCommand R7WebsSecurityHandler stack-based overflowTenda F1203
- CVE-2023-39311WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerabilityThemeFusion Fusion Builder
- CVE-2024-29773WordPress BizPrint plugin <= 4.5.5 - CSRF to XSS vulnerabilityBizSwoop a CPF Concepts, LLC Brand BizPrint
- CVE-2024-29758WordPress Co-marquage service-public.fr plugin <= 0.5.72 - Reflected Cross Site Scripting (XSS) vulnerabilityKienso Co-marquage service-public.fr
- CVE-2024-29759WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerabilityCodePeople Calculated Fields Form
- CVE-2024-29760WordPress Booster for WooCommerce plugin <= 7.1.8 - Reflected Cross Site Scripting (XSS) vulnerabilityPluggabl Booster for WooCommerce
- CVE-2024-29763WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityrealmag777 WordPress Meta Data and Taxonomies Filter
- CVE-2024-29767WordPress Doneren met Mollie plugin <= 2.10.2 - Cross Site Scripting (XSS) vulnerabilityWobbie.nl Doneren met Mollie
- CVE-2024-29777WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerabilityWPMU DEV - Your All-in-One WordPress Platform Forminator
- CVE-2024-29770WordPress Pretty Links plugin <= 3.6.2 - Reflected Cross Site Scripting (XSS) vulnerabilityShortlinks by Pretty Links
- CVE-2024-29774WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityWpDirectoryKit WP Directory Kit
- CVE-2024-29792WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerabilityUnlimited Elements For Elementor
- CVE-2024-29790WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerabilitySEO Plugin by Squirrly SEO
- CVE-2024-29791WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerabilityMad Fish Digital Bulk NoIndex & NoFollow Toolkit
- CVE-2024-29794WordPress Conversios.io plugin <= 6.9.1 - Reflected Cross Site Scripting (XSS) vulnerabilityConversios.io
- CVE-2023-6400Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management (ZCM) product.OpenText™ ZENworks Configuration Management
- CVE-2024-29805WordPress Shipping with Venipak for WooCommerce plugin <= 1.19.5 - Reflected Cross Site Scripting (XSS) vulnerabilityShopUp Shipping with Venipak for WooCommerce
- CVE-2024-29806WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Reflected Cross Site Scripting (XSS) vulnerabilityReservation Diary ReDi Restaurant Reservation
- CVE-2024-25962Dell InsightIQ, version 5.0, contains an improper access control vulnerability.Dell InsightIQ
- CVE-2024-29931WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerabilityWPGMaps WP Go Maps
- CVE-2024-2398HTTP/2 push headers memory-leakcurl
- CVE-2024-29928WordPress Advanced Sermons plugin <= 3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityWP Codeus Advanced Sermons
- CVE-2024-29924WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerabilityW3 Eden Premium Packages
- CVE-2024-29923WordPress PropertyHive plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerabilityPropertyHive
- CVE-2024-29919WordPress Photo Gallery by Ays Plugin <=5.5.2 - Reflected Cross Site Scripting (XSS) vulnerabilityPhoto Gallery Team Photo Gallery by Ays
- CVE-2024-29918WordPress Survey Maker plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerabilitySurvey Maker team Survey Maker
- CVE-2024-29915WordPress Podlove Podcast Publisher plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityPodlove Podcast Publisher
- CVE-2024-29907WordPress SEO Backlink Monitor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityActive Websight SEO Backlink Monitor
- CVE-2024-2954The Action Network plugin for WordPress is vulnerable to SQL Injection via the 'bulk-action' parameter in version 1.4.3 due to…jonathankissam Action Network
- CVE-2024-30194WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilitysunshinephotocart Sunshine Photo Cart
- CVE-2024-30195WordPress New RoyalSlider plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerabilitySemenov New RoyalSlider
- CVE-2024-30196WordPress Easy Social Share Buttons plugin <= 9.4 - Reflected Cross Site Scripting (XSS) vulnerabilityAppscreo Easy Social Share Buttons
- CVE-2024-30201WordPress WP Smart Import plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilityXylus Themes WordPress Importer
- CVE-2024-30199WordPress WP-Lister Lite for Amazon plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerabilityWP Lab WP-Lister Lite for Amazon
- CVE-2024-22299WordPress FV Player plugin <= 7.5.41.7212 - Reflected Cross Site Scripting (XSS) vulnerabilityFoliovision: Making the web work for you FV Flowplayer Vide…
- CVE-2024-22300WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerabilityIcegram Email Subscribers & Newsletters
- CVE-2024-22149WordPress cformsII plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerabilityOliver Seidel, Bastian Germann CformsII
- CVE-2024-22288WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.0 - Reflected Cross Site Scripting…WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
- CVE-2024-24700WordPress WP Editor plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerabilityBenjamin Rojas WP Editor
- CVE-2024-24800WordPress Product Feed PRO for WooCommerce plugin <= 13.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityAdTribes.io Product Feed PRO for WooCommerce
- CVE-2024-25926WordPress Widgets Controller plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityIndiaNIC Widgets Controller
- CVE-2023-39306WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeFusion Fusion Builder
- CVE-2024-22311WordPress Simply Schedule Appointments plugin <= 1.6.6.20 - Reflected Cross Site Scripting (XSS) vulnerabilityN Squared Simply Schedule Appointments
- CVE-2024-24842WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 11.30.2 - PHP Object Injection vulnerabilityEcho Plugins Knowledge Base for Documentation, FAQs with AI…
- CVE-2024-2097An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List…Hitachi Energy MACH SCM Server · Hitachi Energy MACH SCM To…
- CVE-2024-0400SCM Software is a client and server application.Hitachi Energy MACH SCM
- CVE-2024-1531A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below.Hitachi Energy RTU500 series CMU firmware
- CVE-2024-2206SSRF Vulnerability in gradio-app/gradiogradio-app/gradio · gradio
- CVE-2023-29134An issue was discovered in the Cargo extension for MediaWiki through 1.39.3.
- CVE-2023-40284An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40286An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40287An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40288An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40289A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40290An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-43768An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1.
- CVE-2023-45931Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state.
- CVE-2023-46047An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function.
- CVE-2024-24334A heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.
- CVE-2024-24335A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.
- CVE-2024-25354RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.domain-suffix
- CVE-2024-25388drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.
- CVE-2024-25389RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) &…
- CVE-2024-25390A heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.
- CVE-2024-25391A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2.
- CVE-2024-25395A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2.
- CVE-2024-25734An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.
- CVE-2024-25736An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.
Medium, low and unrated 162
- CVE-2024-3009Tenda FH1205 WriteFacMac formWriteFacMac command injectionTenda FH1205
- CVE-2024-3004code-projects Online Book System Product.php cross site scriptingcode-projects Online Book System
- CVE-2024-3003code-projects Online Book System cart.php sql injectioncode-projects Online Book System
- CVE-2024-3002code-projects Online Book System description.php sql injectioncode-projects Online Book System
- CVE-2024-0079CVEnvidia vGPU driver, Cloud Gaming driver
- CVE-2024-0075CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-0078CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-3001code-projects Online Book System Product.php sql injectioncode-projects Online Book System
- CVE-2024-2999Campcodes Online Art Gallery Management System adminHome.php sql injectionCampcodes Online Art Gallery Management System
- CVE-2024-2998Bdtask Multi-Store Inventory Management System Store Update Page cross site scriptingBdtask Multi-Store Inventory Management System
- CVE-2024-2997Bdtask Multi-Store Inventory Management System cross site scriptingBdtask Multi-Store Inventory Management System
- CVE-2024-2996Bdtask Multi-Store Inventory Management System Page Title cross site scriptingBdtask Multi-Store Inventory Management System
- CVE-2024-2995NUUO Camera deletefile.php denial of serviceNUUO Camera
- CVE-2024-29892ZITADEL's actions can overload reserved claimszitadel · github.com/zitadel/zitadel
- CVE-2024-29888Saleor vulnerable to customers addresses leak when using Warehouse as a `Pickup: Local stock only` delivery methodsaleor
- CVE-2024-29886Improved security for stored password hashesserverpod
- CVE-2024-2991Tenda FH1203 WriteFacMac formWriteFacMac command injectionTenda FH1203
- CVE-2024-23451Elasticsearch Incorrect Authorization in the Remote Cluster Security API key based security modelElasticsearch · org.elasticsearch:elasticsearch
- CVE-2024-20307A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote…Cisco IOS
- CVE-2024-20265A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the…Cisco IOS XE Software · Cisco Aironet Access Point Softw… +1
- CVE-2024-23450Elasticsearch Uncontrolled Resource Consumption vulnerabilityElasticsearch · org.elasticsearch:elasticsearch
- CVE-2024-20309A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to…Cisco IOS XE Software
- CVE-2024-20278A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to…Cisco IOS XE Software
- CVE-2024-20306A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local…Cisco IOS XE Software
- CVE-2024-20324A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN…Cisco IOS XE Software
Show all 162 entriesShow fewer entries
- CVE-2024-20316A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to…Cisco IOS XE Software
- CVE-2024-20354A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated…Cisco Aironet Access Point Software
- CVE-2024-20333A vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated…Cisco Digital Network Architecture Center
- CVE-2024-2982Tenda FH1202 WriteFacMac formWriteFacMac command injectionTenda FH1202
- CVE-2024-26652net: pds_core: Fix possible double free in error handling pathLinux
- CVE-2024-26651sr9800: Add check for usbnet_get_endpointsLinux
- CVE-2022-45847WordPress Countdown Widget plugin <= 3.1.9.1 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)WPAssist.me WordPress Countdown Widget
- CVE-2024-23510WordPress Don't Muck My Markup plugin <= 1.8 - Cross Site Request Forgery (CSRF) vulnerabilityMartyn Chamberlin Don't Muck My Markup
- CVE-2024-23515WordPress Cincopa video and media plugin <= 1.159 - Cross Site Request Forgery (CSRF) vulnerabilityCincopa Post Video Players
- CVE-2023-44999WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerabilityWooCommerce Stripe Payment Gateway
- CVE-2023-34020WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerabilityUncanny Owl Uncanny Toolkit for LearnDash
- CVE-2024-28852Ampache has multiple reflective XSS vulnerabilitiesampache
- CVE-2024-28853Ampache Stored XSSampache
- CVE-2024-29761WordPress WP Post Disclaimer plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityKrunal Prajapati WP Post Disclaimer
- CVE-2024-29762WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.1 - Cross Site Scripting (XSS) vulnerabilityJory Hogeveen Off-Canvas Sidebars & Menus
- CVE-2024-29764WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerabilityMolongui
- CVE-2024-29765WordPress Aparat for WordPress plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilityAlireza Sedghi Aparat for WordPress
- CVE-2024-29766WordPress StreamWeasels Twitch Integration plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerabilityStreamWeasels Twitch Integration
- CVE-2024-29768WordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Astra
- CVE-2024-29769WordPress Portfolio Gallery plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerabilityPortfolio Gallery – Image Gallery Plugin
- CVE-2024-27091GeoNode stored XSS to full account takeovergeonode
- CVE-2024-29771WordPress Dracula Dark Mode plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilitySoftLab Dracula Dark Mode - The Revolutionary Dark Mode Plu…
- CVE-2024-29772WordPress MyBookTable Bookstore plugin <= 3.3.7 - Cross Site Scripting (XSS) vulnerabilityStormhill Media MyBookTable Bookstore
- CVE-2024-29775WordPress Frontend Dashboard plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilityvinoth06. Frontend Dashboard
- CVE-2024-29776WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerabilityMetagauss EventPrime
- CVE-2024-29788WordPress Podlove Web Player plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerabilityPodlove Web Player
- CVE-2024-29789WordPress OneClick Chat to Order plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityWalter Pinem OneClick Chat to Order
- CVE-2024-27270IBM WebSphere Application Server Liberty cross-site scriptingIBM WebSphere Application Server Liberty
- CVE-2024-29793WordPress MailChimp Forms by MailMunch plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerabilityMailChimp Forms by MailMunch
- CVE-2023-50961IBM QRadar cross-site scriptingIBM QRadar SIEM
- CVE-2024-28784IBM QRadar cross-site scriptingIBM QRadar SIEM
- CVE-2024-29795WordPress Media Cloud for Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean Spaces and more plugin <= 4.5.24 - Cross Site…Interfacelab Media Cloud for Amazon S3, Imgix, Google Cloud…
- CVE-2024-29796WordPress Hot Random Image plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerabilityHot Themes Hot Random Image
- CVE-2024-29797WordPress Grid Shortcodes plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityWP Darko Grid Shortcodes
- CVE-2024-29798WordPress Gratisfaction plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerabilityAppsmav Gratisfaction
- CVE-2024-29799WordPress WP Fast Total Search plugin <= 1.59.211 - Cross Site Scripting (XSS) vulnerabilityEpsiloncool WP Fast Total Search
- CVE-2024-29801WordPress Fullscreen Galleria plugin <= 1.6.11 - Cross Site Scripting (XSS) vulnerabilityPetri Damstén Fullscreen Galleria
- CVE-2024-29802WordPress Football Pool plugin <= 2.11.3 - Cross Site Scripting (XSS) vulnerabilityAntoine Hurkmans Football Pool
- CVE-2024-29803WordPress FlatPM plugin < 3.1.05 - Cross Site Scripting (XSS) vulnerabilityMehanoid.pro FlatPM
- CVE-2024-29804WordPress Fancy Comments WordPress plugin <= 1.2.14 - Cross Site Scripting (XSS) vulnerabilityTeam Heateor Fancy Comments WordPress
- CVE-2024-29807WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerabilityDearHive DearFlip
- CVE-2024-29811WordPress Radio Player plugin <= 2.0.73 - Cross Site Scripting (XSS) vulnerabilitySoftLab Radio Player
- CVE-2024-29812WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerabilityReviewX
- CVE-2024-29813WordPress CartFlows plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityFunnel Builder by CartFlows
- CVE-2024-29814WordPress Exchange Rates Widget plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerabilityCurrencyRate.today Exchange Rates Widget
- CVE-2024-29815WordPress WP Change Email Sender plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerabilityAminur Islam WP Change Email Sender
- CVE-2024-29816WordPress Woo Viet plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabilityhtdat Woo Viet
- CVE-2024-29817WordPress affiliate-toolkit – WordPress Affiliate Plugin plugin <= 3.4.5 - Cross Site Scripting (XSS) vulnerabilitySERVIT Software Solutions affiliate-toolkit
- CVE-2024-29818WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerabilityPoll Maker & Voting Plugin Team (InfoTheme) WP Poll Maker
- CVE-2024-30186WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerabilityBdThemes Prime Slider – Addons For Elementor
- CVE-2024-30185WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerabilityBdThemes Element Pack Elementor Addons
- CVE-2024-30184WordPress Popup Builder plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerabilityLooking Forward Software Incorporated. Popup Builder
- CVE-2024-30183WordPress WPBakery Page Builder Addons by Livemesh plugin <= 3.7 - Cross Site Scripting (XSS) vulnerabilityLivemesh Addons for WPBakery Page Builder
- CVE-2024-30182WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityDevItems HT Mega
- CVE-2024-30181WordPress Locatoraid Store Locator plugin <= 3.9.30 - Cross Site Scripting (XSS) vulnerabilityPlainware Locatoraid Store Locator
- CVE-2024-30180WordPress Easy Social Feed plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilityEasy Social Feed
- CVE-2024-30179WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerabilityBoldThemes Bold Page Builder
- CVE-2024-30178WordPress Simply Static plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerabilitySimply Static
- CVE-2024-30177WordPress Exclusive Addons for Elementor plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerabilityExclusive Addons Elementor
- CVE-2024-29936WordPress Image Hover Effects – Elementor Addon plugin <= 1.4 - Cross Site Scripting (XSS) vulnerabilityBlocksera Image Hover Effects – Elementor Addon
- CVE-2024-29935WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerabilitySinaExtra Sina Extension for Elementor
- CVE-2024-29934WordPress Piotnet Addons For Elementor plugin <= 2.4.25 - Cross Site Scripting (XSS) vulnerabilityPiotnet Addons For Elementor
- CVE-2024-29819WordPress WPFront Notification Bar plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerabilitySyam Mohan WPFront Notification Bar
- CVE-2024-29933WordPress Web Icons plugin <= 1.0.0.10 - Cross Site Scripting (XSS) vulnerabilityGhozyLab Web Icons
- CVE-2024-29932WordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityrealmag777 WordPress Meta Data and Taxonomies Filter
- CVE-2024-29930WordPress Crypto Converter Widget plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerabilityCurrencyRate.today Crypto Converter Widget
- CVE-2024-29929WordPress WCFM plugin <= 6.7.8 - Cross Site Scripting (XSS) vulnerabilityWC Lovers WCFM – Frontend Manager for WooCommerce
- CVE-2024-2962Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorizationcodesupplyco Networker - Tech News WordPress Theme with Dar…
- CVE-2024-2466TLS certificate check bypass with mbedTLScurl
- CVE-2024-2379QUIC certificate check bypass with wolfSSLcurl
- CVE-2024-2004Usage of disabled protocolcurl
- CVE-2024-1023Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertxvertx-core · Red Hat CEQ +23
- CVE-2024-2956Simple Ajax Chat <= 20231101 - Authenticated (Admin+) Stored Cross-Site Scriptingspecialk Simple Ajax Chat – Add a Fast, Secure Chat Box
- CVE-2024-29927WordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerabilityHasTheme WishSuite
- CVE-2024-29926WordPress WC Builder plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerabilityHasThemes WC Builder
- CVE-2024-29925WordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerabilitywpWax Post Grid, Slider & Carousel Ultimate
- CVE-2024-29922WordPress Slider Hero plugin <= 8.6.1 - Cross Site Scripting (XSS) vulnerabilityQuantum Cloud Slider Hero
- CVE-2024-29921WordPress Photo Gallery by Supsystic plugin <= 1.15.16 - Cross Site Scripting (XSS) vulnerabilityPhoto Gallery by Supsystic
- CVE-2024-29920WordPress Move Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerabilityMoveaddons Move Addons for Elementor
- CVE-2024-29917WordPress Compact WP Audio Player plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerabilityCompact WP Audio Player
- CVE-2024-29914WordPress Stratum – Elementor Widgets plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerabilityMotoPress Stratum
- CVE-2024-29913WordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityThemeum Tutor LMS Elementor Addons
- CVE-2024-29912WordPress iCalendrier plugin <= 1.80 - Cross Site Scripting (XSS) vulnerabilityBaptiste Placé iCalendrier
- CVE-2024-29911WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Cross Site Scripting (XSS) vulnerabilityJewel Theme Master Addons for Elementor
- CVE-2024-29910WordPress Dropdown Multisite selector plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerabilityAlordiel Dropdown Multisite selector
- CVE-2024-29909WordPress Travelers' Map plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilityCamille Verrier Travelers' Map
- CVE-2024-29908WordPress Co-marquage service-public.fr plugin <= 0.5.71 - Cross Site Scripting (XSS) vulnerabilityKienso Co-marquage service-public.fr
- CVE-2024-29820WordPress PDF Builder for WPForms plugin <= 1.2.88 - Cross Site Scripting (XSS) vulnerabilityRedNao PDF Builder for WPForms
- CVE-2024-29906WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityrealmag777 WordPress Meta Data and Taxonomies Filter
- CVE-2024-30192WordPress Pinterest Plugin <= 1.8.2 - Cross Site Scripting (XSS)GS Plugins GS Pins for Pinterest
- CVE-2024-30193WordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerabilityandy_moyle Church Admin
- CVE-2024-1521Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Uploadhttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-2120Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigationhttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-2121Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-2781Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_taghttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-1364Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scriptinghttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-27188WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityCloudways Breeze
- CVE-2024-30197WordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerabilityandy_moyle Church Admin
- CVE-2024-30198WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeKraft BuddyForms
- CVE-2023-52228WordPress Beds24 Online Booking plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerabilityMark Kinchin Beds24 Online Booking
- CVE-2024-25920WordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP SMS
- CVE-2024-2945Campcodes Online Examination System updateExaminee.php sql injectionCampcodes Online Examination System
- CVE-2024-2944Campcodes Online Examination System deleteCourseExe.php sql injectionCampcodes Online Examination System
- CVE-2024-2943Campcodes Online Examination System deleteExamExe.php sql injectionCampcodes Online Examination System
- CVE-2024-2942Campcodes Online Examination System deleteQuestionExe.php sql injectionCampcodes Online Examination System
- CVE-2024-2941Campcodes Online Examination System loginExe.php sql injectionCampcodes Online Examination System
- CVE-2024-2203The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widgetposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2024-2139Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widgetlitonice13 Master Addons For Elementor – Widgets, Extension…
- CVE-2024-2210The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listingposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2024-1532A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below.Hitachi Energy RTU500 series CMU firmware
- CVE-2024-2940Campcodes Online Examination System updateCourse.php cross site scriptingCampcodes Online Examination System
- CVE-2024-2244REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in…Hitachi Energy Asset Suite EAM
- CVE-2024-2939Campcodes Online Examination System updateExaminee.php cross site scriptingCampcodes Online Examination System
- CVE-2024-2938Campcodes Online Examination System updateCourse.php sql injectionCampcodes Online Examination System
- CVE-2024-2935SourceCodester Todo List in Kanban Board Add ToDo cross site scriptingSourceCodester Todo List in Kanban Board
- CVE-2024-2934SourceCodester Todo List in Kanban Board delete-todo.php sql injectionSourceCodester Todo List in Kanban Board
- CVE-2024-2932SourceCodester Online Chatting System update_room.php sql injectionSourceCodester Online Chatting System
- CVE-2023-25364Opswat Metadefender Core before 5.2.1 does not properly defend against potential HTML injection and XSS attacks.
- CVE-2023-31854std::bad_alloc is mishandled in Precomp 0.4.8.
- CVE-2023-39804In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- CVE-2023-40285An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-45913Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId().
- CVE-2023-45919Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString().
- CVE-2023-45920Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints().
- CVE-2023-45922glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute().
- CVE-2023-45925GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at…
- CVE-2023-45935Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms().
- CVE-2023-46046An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file.
- CVE-2023-46048Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c.
- CVE-2023-46049LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o…
- CVE-2023-46051TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c.
- CVE-2023-46052Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration file.
- CVE-2023-47438SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the…reportico-web/reportico
- CVE-2024-25392An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.
- CVE-2024-25394A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0'…
- CVE-2024-25580An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x…
- CVE-2024-28085wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals t