|
301
|
7.5 |
HIGH
Network
gradio_project
|
gradio
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerability is a **lack of integrity check** on the downloaded FRP client, which could potentially allow attackers to in…
Update
|
NVD-CWE-Other
|
CVE-2024-47867
|
2024-11-16 01:44 |
2024-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
302
|
9.8 |
CRITICAL
Network
pedalo
|
pedalo_connector
|
The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'login_admin_user' function. T…
Update
|
CWE-288
Authentication Bypass Using an Alternate Path or Channel
|
CVE-2024-9822
|
2024-11-16 01:41 |
2024-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
303
|
- |
|
-
|
-
|
parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting (XSS) and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulne…
Update
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-5125
|
2024-11-16 01:35 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304
|
7.8 |
HIGH
Local
|
samsung
|
android
|
Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behavi…
Update
|
NVD-CWE-noinfo
|
CVE-2024-34662
|
2024-11-16 01:34 |
2024-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305
|
5.4 |
MEDIUM
Network
|
seothemes
|
display_terms_shortcode
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SEO Themes Display Terms Shortcode allows Stored XSS.This issue affects Display Terms Shor…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-51610
|
2024-11-16 01:32 |
2024-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306
|
5.4 |
MEDIUM
Network
|
genoo
|
genoo
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Genoo, LLC Genoo allows DOM-Based XSS.This issue affects Genoo: from n/a through 6.0.10.
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-51605
|
2024-11-16 01:31 |
2024-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307
|
6.1 |
MEDIUM
Network
|
alist_project
|
alist
|
AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-47067
|
2024-11-16 01:28 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
308
|
5.4 |
MEDIUM
Network
|
mirceatm
|
nmr_strava_activities
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mircea N. NMR Strava activities allows DOM-Based XSS.This issue affects NMR Strava activit…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-51603
|
2024-11-16 01:24 |
2024-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309
|
5.4 |
MEDIUM
Network
|
jumpstartcreatives
|
media_modal
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Carlo Andro Mabugay Media Modal allows DOM-Based XSS.This issue affects Media Modal: from …
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-51604
|
2024-11-16 01:19 |
2024-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310
|
5.4 |
MEDIUM
Network
|
cyberchimps
|
responsive_addons_for_elementor
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cyberchimps Responsive Addons for Elementor allows DOM-Based XSS.This issue affects Respon…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-52358
|
2024-11-16 01:17 |
2024-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
