|
181
|
5.4 |
MEDIUM
Network
|
wpcodeus
|
advanced_sermons
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Codeus Advanced Sermons allows Stored XSS.This issue affects Advanced Sermons: from n/a…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-50458
|
2024-11-14 04:45 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
182
|
5.4 |
MEDIUM
Network
|
pluginus
|
meta_data_and_taxonomies_filter
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored XSS.This issue a…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-50451
|
2024-11-14 04:44 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
183
|
5.4 |
MEDIUM
Network
|
oretnom23
|
toll_tax_management_system
|
A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" i…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-51032
|
2024-11-14 04:35 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
184
|
- |
|
-
|
-
|
An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects produ…
Update
|
-
|
CVE-2024-33471
|
2024-11-14 04:35 |
2024-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
185
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for
(va…
Update
|
-
|
CVE-2021-47386
|
2024-11-14 04:35 |
2024-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
186
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
udp: do not accept non-tunnel GSO skbs landing in a tunnel
When rx-udp-gro-forwarding is enabled UDP packets might be GROed when
…
Update
|
-
|
CVE-2024-35884
|
2024-11-14 04:35 |
2024-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
187
|
- |
|
-
|
-
|
Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling.
A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the …
Update
|
CWE-20
Improper Input Validation
|
CVE-2023-51747
|
2024-11-14 04:35 |
2024-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
188
|
6.1 |
MEDIUM
Network
|
microfocus
|
arcsight_management_center
arcsight_platform
|
A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-9841
|
2024-11-14 04:34 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
189
|
5.4 |
MEDIUM
Network
|
oretnom23
|
cab_management_system
|
A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "M…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-51031
|
2024-11-14 04:34 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
190
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()
Mounting btrfs from two images (which have the same…
Update
|
CWE-416
Use After Free
|
CVE-2024-50217
|
2024-11-14 04:24 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
