261
|
- |
|
-
|
-
|
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a reflected cross-site scripting (XSS) vulnera…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-43795
|
2024-10-3 05:15 |
2024-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
262
|
- |
|
-
|
-
|
CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. …
Update
|
CWE-1327
|
CVE-2024-47176
|
2024-10-3 05:15 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
263
|
- |
|
-
|
-
|
RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning, which could have lead to a full repository takeover. Downstream users …
Update
|
CWE-20
Improper Input Validation
|
CVE-2024-47179
|
2024-10-3 05:15 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264
|
6.5 |
MEDIUM
Network
|
cisco
|
ios_xe ios
|
A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affec…
Update
|
CWE-352
Origin Validation Error
|
CVE-2024-20414
|
2024-10-3 05:02 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265
|
7.2 |
HIGH
Network
|
prisna
|
google_website_translator
|
The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'pri…
Update
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2024-8514
|
2024-10-3 04:59 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266
|
5.4 |
MEDIUM
Network
|
themexclub
|
oneelements
|
The OneElements – Best Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.3.7 due to insufficient input sa…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-9068
|
2024-10-3 04:55 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267
|
5.4 |
MEDIUM
Network
|
devfarm
|
wp_gpx_maps
|
The WP GPX Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sgpx' shortcode in all versions up to, and including, 1.7.08 due to insufficient input sanitization…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-9028
|
2024-10-3 04:45 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268
|
5.4 |
MEDIUM
Network
|
wpzoom
|
wpzoom_shortcodes
|
The WPZOOM Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitiza…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-9027
|
2024-10-3 04:42 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269
|
5.4 |
MEDIUM
Network
|
graphicsly
|
graphicsly
|
The Graphicsly – The ultimate graphics plugin for WordPress website builder ( Gutenberg, Elementor, Beaver Builder, WPBakery ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SV…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-9069
|
2024-10-3 04:37 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270
|
7.2 |
HIGH
Network
|
freelancer-coder
|
wordpress_simple_html_sitemap
|
The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.1 due to insufficient escaping on the user supplie…
Update
|
CWE-89
SQL Injection
|
CVE-2024-7385
|
2024-10-3 04:35 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|