741
|
7.5 |
HIGH
Network
-
|
-
|
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.
|
CWE-754
Improper Check for Unusual or Exceptional Conditions
|
CVE-2024-8175
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
742
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Livemesh Livemesh Addons for Elementor allows Stored XSS.This issue affects Livemesh Addon…
|
CWE-79
Cross-site Scripting
|
CVE-2024-47303
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
743
|
- |
|
-
|
-
|
Inadequate Encryption Strength vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.3.5.
Using the MD5 value of a user's email to access Gravatar is insecure and can lead to …
|
-
|
CVE-2024-40761
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
744
|
- |
|
-
|
-
|
Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content.
Th…
|
CWE-269
Improper Privilege Management
|
CVE-2024-23454
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
745
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widget…
|
CWE-1230
Exposure of Sensitive Information Through Metadata
|
CVE-2024-8910
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
746
|
5.3 |
MEDIUM
Network
-
|
-
|
The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wc/v3/revolut REST API endpoint in all versions u…
|
CWE-862
Missing Authorization
|
CVE-2024-8678
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
747
|
8.8 |
HIGH
Network
|
-
|
-
|
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and incl…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2024-8290
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
748
|
- |
|
-
|
-
|
The Ninja Forms Contact Form plugin for WordPress is vulnerable to Reflected Self-Based Cross-Site Scripting via the 'Referer' header in all versions up to, and including, 3.8.15 due to insufficient …
|
CWE-79
Cross-site Scripting
|
CVE-2024-3866
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
749
|
5.3 |
MEDIUM
Network
-
|
-
|
The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress…
|
CWE-862
Missing Authorization
|
CVE-2024-8658
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
750
|
- |
|
-
|
-
|
The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
|
-
|
CVE-2024-7892
|
2024-09-26 22:32 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|