91
|
- |
|
-
|
-
|
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability m…
New
|
CWE-125
Out-of-bounds Read
|
CVE-2024-0120
|
2024-10-26 17:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
92
|
- |
|
-
|
-
|
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability m…
New
|
CWE-125
Out-of-bounds Read
|
CVE-2024-0119
|
2024-10-26 17:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
93
|
- |
|
-
|
-
|
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability m…
New
|
CWE-125
Out-of-bounds Read
|
CVE-2024-0118
|
2024-10-26 17:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
94
|
- |
|
-
|
-
|
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability m…
New
|
CWE-125
Out-of-bounds Read
|
CVE-2024-0117
|
2024-10-26 17:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
95
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The WP Awesome Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.4.0 due to insufficient input sanitization and outp…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-9456
|
2024-10-26 14:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
96
|
6.1 |
MEDIUM
Network
|
-
|
-
|
The Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on th…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-8870
|
2024-10-26 13:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
97
|
- |
|
-
|
-
|
The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.6. This is due to the 'watchtower_ota_token' default value is empty, and the not emp…
New
|
CWE-288
Authentication Bypass Using an Alternate Path or Channel
|
CVE-2024-9933
|
2024-10-26 12:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
98
|
9.8 |
CRITICAL
Network
-
|
-
|
The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbt_insertImageNew' function in versions up to, and including, 3.0.…
New
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-9932
|
2024-10-26 12:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
99
|
9.8 |
CRITICAL
Network
-
|
-
|
The Wux Blog Editor plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.0. This is due to missing validation on the token being supplied during the autol…
New
|
CWE-288
Authentication Bypass Using an Alternate Path or Channel
|
CVE-2024-9931
|
2024-10-26 12:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
100
|
9.8 |
CRITICAL
Network
-
|
-
|
The Extensions by HocWP Team plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.2.3.2. This is due to missing validation on the user being supplied in the…
New
|
CWE-288
Authentication Bypass Using an Alternate Path or Channel
|
CVE-2024-9930
|
2024-10-26 12:15 |
2024-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|