CVE Alert: CVE-2022-30357
Vulnerability Summary: CVE-2022-30357 OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile...
Vulnerability Summary: CVE-2022-30357 OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile...
Vulnerability Summary: CVE-2024-10386 CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a threat actor...
Vulnerability Summary: CVE-2024-48581 File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute...
Vulnerability Summary: CVE-2024-8036 ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker...
Vulnerability Summary: CVE-2023-26248 The Kademlia DHT (go-libp2p-kad-dht 0.20.0 and earlier) used in IPFS (0.18.1 and earlier) assigns routing information for...
Vulnerability Summary: CVE-2024-10387 CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor...
Vulnerability Summary: CVE-2024-47821 pyLoad is a free and open-source Download Manager. The folder `/.pyload/scripts` has scripts which are run when...
Vulnerability Summary: CVE-2024-48654 Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via...
Vulnerability Summary: CVE-2024-9585 The Image Map Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'save_project' function...
Vulnerability Summary: CVE-2024-9584 The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of...
Vulnerability Summary: CVE-2024-49702 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in myCRED myCred Elementor...
Vulnerability Summary: CVE-2024-10180 The Contact Form 7 – Repeatable Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
Vulnerability Summary: CVE-2024-10332 A Cross-Site Scripting vulnerability has been found in Janto v4.3r11 from Impronta. This vulnerability allows an attacker...
Vulnerability Summary: CVE-2024-8959 The WP Adminify – Custom WordPress Dashboard, Login and Admin Customizer plugin for WordPress is vulnerable to...
Vulnerability Summary: CVE-2024-5608 Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature....
Vulnerability Summary: CVE-2024-10335 A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical....
Vulnerability Summary: CVE-2024-48538 Incorrect access control in the firmware update and download processes of Neye3C v4.5.2.0 allows attackers to access...
Vulnerability Summary: CVE-2024-49696 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RoboSoft Robo Gallery...
Vulnerability Summary: CVE-2024-49693 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kraftplugins Mega Elements...
Vulnerability Summary: CVE-2024-49695 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins WP...
Vulnerability Summary: CVE-2024-10336 A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This...
Vulnerability Summary: CVE-2024-44141 The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person...
Vulnerability Summary: CVE-2024-48548 The APK file in Cloud Smart Lock v2.0.1 has a leaked a URL that can call an...
Vulnerability Summary: CVE-2024-48547 Incorrect access control in the firmware update and download processes of DreamCatcher Life v1.8.7 allows attackers to...