431
|
- |
|
-
|
-
|
Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parameters.
New
|
-
|
CVE-2024-46082
|
2024-10-3 01:35 |
2024-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
432
|
- |
|
-
|
-
|
Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.
New
|
-
|
CVE-2024-46080
|
2024-10-3 01:35 |
2024-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
433
|
8.8 |
HIGH
Network
|
dineshkarki
|
use_any_font
|
Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font allows Cross Site Request Forgery.This issue affects Use Any Font: from n/a through 6.3.08.
Update
|
CWE-352
Origin Validation Error
|
CVE-2024-47305
|
2024-10-3 01:35 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
434
|
8.8 |
HIGH
Network
|
ansible-semaphore
|
ansible_semaphore
|
An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.
Update
|
NVD-CWE-noinfo
|
CVE-2023-39059
|
2024-10-3 01:35 |
2023-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
435
|
8.8 |
HIGH
Network
|
ferrislucas
|
promptr
|
A remote command execution (RCE) vulnerability in promptr v6.0.7 allows attackers to execute arbitrary commands via a crafted URL.
Update
|
CWE-94
Code Injection
|
CVE-2024-46489
|
2024-10-3 01:24 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
436
|
6.1 |
MEDIUM
Network
|
pierros
|
kodex_posts_likes
|
The Kodex Posts likes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-8713
|
2024-10-3 01:22 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
437
|
9.8 |
CRITICAL
Network
artbees
|
jupiter_x_core
|
The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.7.5. This is due to improper authentication via the Social Login widget. This ma…
Update
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2024-7781
|
2024-10-3 01:21 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
438
|
5.5 |
MEDIUM
Local
|
asg017
|
sqlite-vec
|
sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
Update
|
CWE-787
Out-of-bounds Write
|
CVE-2024-46488
|
2024-10-3 01:21 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
439
|
9.8 |
CRITICAL
Network
jianbo
|
rest_api_to_miniprogram
|
The REST API TO MiniProgram plugin for WordPress is vulnerable to privilege escalation via account takeovr in all versions up to, and including, 4.7.1 via the updateUserInfo() due to missing validati…
Update
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2024-8485
|
2024-10-3 01:19 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
440
|
- |
|
-
|
-
|
Certain HP LaserJet printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer. The printer displays a “JPEG Unsupported” message which may not clear, po…
New
|
-
|
CVE-2024-9423
|
2024-10-3 01:15 |
2024-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|