CVE Alert: CVE-2024-9231
Vulnerability Summary: CVE-2024-9231 The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use...
Vulnerabilities
CVE Alert: CVE-2024-43173
Vulnerability Summary: CVE-2024-43173 IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the...
CVE Alert: CVE-2024-26272
Vulnerability Summary: CVE-2024-26272 Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal 7.3.2 through 7.4.3.107, and...
CVE Alert: CVE-2024-26273
Vulnerability Summary: CVE-2024-26273 Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal 7.4.0 through 7.4.3.103, and...
CVE Alert: CVE-2024-50311
Vulnerability Summary: CVE-2024-50311 A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the...
CVE Alert: CVE-2024-26271
Vulnerability Summary: CVE-2024-26271 Cross-site request forgery (CSRF) vulnerability in the My Account widget in Liferay Portal 7.4.3.75 through 7.4.3.111, and...
CVE Alert: CVE-2024-8980
Vulnerability Summary: CVE-2024-8980 The Script Console in Liferay Portal 7.0.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA...
CVE Alert: CVE-2024-38002
Vulnerability Summary: CVE-2024-38002 The workflow component in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through...
CVE Alert: CVE-2022-23861
Vulnerability Summary: CVE-2022-23861 Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in...
CVE Alert: CVE-2024-43177
Vulnerability Summary: CVE-2024-43177 IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the...
CVE Alert: CVE-2022-23862
Vulnerability Summary: CVE-2022-23862 A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX...
CVE Alert: CVE-2024-47819
Vulnerability Summary: CVE-2024-47819 Umbraco, a free and open source .NET content management system, has a cross-site scripting vulnerability starting in...
CVE Alert: CVE-2024-49373
Vulnerability Summary: CVE-2024-49373 No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1,...
CVE Alert: CVE-2024-46240
Vulnerability Summary: CVE-2024-46240 Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact...
CVE Alert: CVE-2024-48605
Vulnerability Summary: CVE-2024-48605 An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the...
CVE Alert: CVE-2024-48925
Vulnerability Summary: CVE-2024-48925 Umbraco, a free and open source .NET content management system, has an improper access control issue starting...
CVE Alert: CVE-2024-46538
Vulnerability Summary: CVE-2024-46538 A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML...
CVE Alert: CVE-2024-45518
Vulnerability Summary: CVE-2024-45518 An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch...
CVE Alert: CVE-2024-48926
Vulnerability Summary: CVE-2024-48926 Umbraco, a free and open source .NET content management system, has an insufficient session expiration issue in...
CVE Alert: CVE-2024-48927
Vulnerability Summary: CVE-2024-48927 Umbraco, a free and open source .NET content management system, has a remote code execution issue in...
CVE Alert: CVE-2024-48929
Vulnerability Summary: CVE-2024-48929 Umbraco is a free and open source .NET content management system. In versions on the 13.x branch...
CVE Alert: CVE-2024-48706
Vulnerability Summary: CVE-2024-48706 Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform within...
CVE Alert: CVE-2024-48707
Vulnerability Summary: CVE-2024-48707 Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit...
CVE Alert: CVE-2024-48570
Vulnerability Summary: CVE-2024-48570 Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports...
