201
|
5.4 |
MEDIUM
Network
|
coolplugins
|
web_stories_widgets_for_elementor
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cool Plugins Web Stories Widgets For Elementor allows Stored XSS.This issue affects Web St…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-52354
|
2024-11-16 02:50 |
2024-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
202
|
5.4 |
MEDIUM
Network
|
sharethepractice
|
christian_science_bible_lesson_subjects
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gabriel Serafini Christian Science Bible Lesson Subjects allows DOM-Based XSS.This issue a…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-52353
|
2024-11-16 02:49 |
2024-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
203
|
5.4 |
MEDIUM
Network
|
miloco
|
postcasa_shortcode
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andrew Milo Postcasa Shortcode allows DOM-Based XSS.This issue affects Postcasa Shortcode:…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-52352
|
2024-11-16 02:46 |
2024-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
204
|
7.8 |
HIGH
Local
|
dell
|
smartfabric_os10
|
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A l…
Update
|
CWE-77
Command Injection
|
CVE-2024-49557
|
2024-11-16 02:36 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
205
|
3.3 |
LOW
Local
|
dell
|
smartfabric_os10
|
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local…
Update
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2024-48838
|
2024-11-16 02:36 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
206
|
- |
|
-
|
-
|
Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external storage with fixed credentials, the API returns them and adds them into the frontend…
New
|
CWE-200
Information Exposure
|
CVE-2024-52523
|
2024-11-16 02:35 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
207
|
- |
|
-
|
-
|
Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider could be tricked into downloading bigger websites than intended, to find open-…
New
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2024-52520
|
2024-11-16 02:35 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
208
|
4.9 |
MEDIUM
Network
|
-
|
-
|
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This…
New
|
CWE-20
Improper Input Validation
|
CVE-2021-1470
|
2024-11-16 02:35 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
209
|
7.8 |
HIGH
Local
|
dell
|
smartfabric_os10
|
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit …
Update
|
CWE-77
Command Injection
|
CVE-2024-49560
|
2024-11-16 02:35 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
210
|
7.8 |
HIGH
Local
|
dell
|
smartfabric_os10
|
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potenti…
Update
|
NVD-CWE-noinfo
|
CVE-2024-49558
|
2024-11-16 02:35 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|