scip AG [Security - Consulting - Information - Process]

CVE-2024-11852 | Element Pack Elementor Addons Plugin up to 5.10.12 on WordPress authorization

21.12.2024 17:44

A vulnerability classified as critical was found in Element Pack Elementor Addons Plugin up to 5.10.12 on WordPress. This vulnerability affects unknown code. The manipulation leads to missing authoriz...

CVE-2024-51463 | IBM i 7.3/7.4/7.5 server-side request forgery

21.12.2024 15:45

A vulnerability classified as critical has been found in IBM i 7.3/7.4/7.5. This affects an unknown part. The manipulation leads to server-side request forgery. This vulnerability is uniquely identif...

CVE-2024-51464 | IBM i 7.3/7.4/7.5 Navigator for i Interface http headers for scripting syntax

21.12.2024 15:44

A vulnerability was found in IBM i 7.3/7.4/7.5. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Navigator for i Interface. The manipulation lead...

CVE-2024-12591 | wbolt MagicPost Plugin up to 1.2.1 on WordPress Shortcode wb_share_social cross site scripting

21.12.2024 11:08

A vulnerability was found in wbolt MagicPost Plugin up to 1.2.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function wb_share_social of the component Short...

CVE-2024-12408 | wpseahorse WP on AWS Plugin up to 5.2.1 on WordPress cross site scripting

21.12.2024 11:08

A vulnerability was found in wpseahorse WP on AWS Plugin up to 5.2.1 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scriptin...

CVE-2024-12558 | puckrobin WP BASE Booking of Appointments, Services and Events Plugin export_db authorization

21.12.2024 11:08

A vulnerability was found in puckrobin WP BASE Booking of Appointments, Services and Events Plugin up to 4.9.2 on WordPress and classified as problematic. This issue affects the function export_db. Th...

CVE-2020-13629 | Espressif UART Download Mode uninitialized pointer (AR2020-001)

21.12.2024 10:27

A vulnerability has been found in Espressif and classified as problematic. This vulnerability affects unknown code of the component UART Download Mode. The manipulation leads to uninitialized pointer....

CVE-2020-15048 | Espressif Flash injection (AR2020-001)

21.12.2024 10:27

A vulnerability, which was classified as problematic, was found in Espressif. This affects an unknown part of the component Flash Handler. The manipulation leads to injection. This vulnerability is u...

CVE-2024-12893 | Portabilis i-Educar up to 2.9 Tipo de Usuário Page /usuarios/tipos/2 name cross site scripting

21.12.2024 10:12

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. Affected by this issue is some unknown functionality of the file /usuarios/tipos/2 of the compone...

CVE-2024-12892 | code-projects Online Exam Mastering System 1.0 /sign.php?q=account.php name/gender/college cross site scripting

21.12.2024 10:05

A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. T...

CVE-2024-12891 | code-projects Online Exam Mastering System 1.0 account.php?q=quiz&step=2 eid sql injection

21.12.2024 10:05

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of...

CVE-2024-12890 | code-projects Online Exam Mastering System 1.0 update.php?q=quiz&step=2 eid sql injection

21.12.2024 10:05

A vulnerability was found in code-projects Online Exam Mastering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /update.php?q=quiz&step=2. The ma...

VDB-289150 | ISC BIND 9.20.0/9.20.1/9.20.2/9.20.3/9.20.4 QPzone NSEC3 assertion

21.12.2024 09:41

A vulnerability was found in ISC BIND 9.20.0/9.20.1/9.20.2/9.20.3/9.20.4. It has been declared as critical. This vulnerability affects unknown code of the component QPzone NSEC3 Handler. The manipulat...

CVE-2024-11688 | LaTeX2HTML Plugin up to 2.5.5 on WordPress cross site scripting

21.12.2024 09:37

A vulnerability was found in LaTeX2HTML Plugin up to 2.5.5 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vuln...

CVE-2024-10453 | Elementor Website Builder Plugin up to 3.25.9 on WordPress Typography Setting cross site scripting

21.12.2024 09:37

A vulnerability was found in Elementor Website Builder Plugin up to 3.25.9 on WordPress and classified as problematic. Affected by this issue is some unknown functionality of the component Typography ...

CVE-2024-11722 | DynamiApps Frontend Admin Plugin up to 3.25.1 on WordPress sql injection

21.12.2024 09:37

A vulnerability has been found in DynamiApps Frontend Admin Plugin up to 3.25.1 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation le...

CVE-2024-12875 | Easy Digital Downloads Plugin up to 3.3.2 on WordPress File information disclosure

21.12.2024 09:36

A vulnerability, which was classified as problematic, was found in Easy Digital Downloads Plugin up to 3.3.2 on WordPress. Affected is an unknown function of the component File Handler. The manipulati...

CVE-2024-11607 | GTPayment Donations Plugin up to 1.0.0 on WordPress cross-site request forgery

21.12.2024 09:36

A vulnerability, which was classified as problematic, has been found in GTPayment Donations Plugin up to 1.0.0 on WordPress. This issue affects some unknown processing. The manipulation leads to cross...

CVE-2023-31279 | Sierra Wireless AirVantage Management Service improper authentication (swi-psa-2023-002)

21.12.2024 09:35

A vulnerability classified as critical was found in Sierra Wireless AirVantage. This vulnerability affects unknown code of the component Management Service. The manipulation leads to improper authenti...

CVE-2023-31280 | Sierra Wireless AirVantage Online Warranty Checker Tool information disclosure (swi-psa-2023-002)

21.12.2024 09:32

A vulnerability classified as problematic has been found in Sierra Wireless AirVantage. This affects an unknown part of the component Online Warranty Checker Tool. The manipulation leads to informatio...

CVE-2024-12884 | Codezips E-Commerce Website 1.0 /login.php email sql injection

20.12.2024 23:40

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argume...

CVE-2024-12883 | code-projects Job Recruitment 1.0 /_email.php email cross site scripting

20.12.2024 23:38

A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /_email.php. The manipulatio...

CVE-2024-11975 | Reactflow Visitor Recording and Heatmaps Plugin up to 1.0.10 on WordPress cross-site request forgery

20.12.2024 23:35

A vulnerability was found in Reactflow Visitor Recording and Heatmaps Plugin up to 1.0.10 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads t...

CVE-2024-11808 | Pingmeter Uptime Monitoring Plugin up to 1.0.3 on WordPress cross site scripting

20.12.2024 23:35

A vulnerability was found in Pingmeter Uptime Monitoring Plugin up to 1.0.3 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site...

CVE-2024-9545 | Shortcodes and Extra Features for Phlox Theme up to 2.16.4 on WordPress Shortcode aux_contact_box/aux_gmaps cross site scripting

20.12.2024 23:35

A vulnerability has been found in Shortcodes and Extra Features for Phlox Theme up to 2.16.4 on WordPress and classified as problematic. This vulnerability affects the function aux_contact_box/aux_gma...

CVE-2024-12588 | Shortcodes and Extra Features for Phlox Theme up to 2.16.4 on WordPress Staff Widget cross site scripting

20.12.2024 23:35

A vulnerability, which was classified as problematic, was found in Shortcodes and Extra Features for Phlox Theme up to 2.16.4 on WordPress. This affects an unknown part of the component Staff Widget. ...

CVE-2024-11196 | Multi-column Tag Map Plugin up to 17.0.33 on WordPress Shortcode mctagmap cross site scripting

20.12.2024 23:34

A vulnerability, which was classified as problematic, has been found in Multi-column Tag Map Plugin up to 17.0.33 on WordPress. Affected by this issue is the function mctagmap of the component Shortco...

CVE-2024-11287 | Ebook Store Plugin up to 5.8001 on WordPress cross site scripting

20.12.2024 23:34

A vulnerability classified as problematic was found in Ebook Store Plugin up to 5.8001 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site sc...

CVE-2024-12262 | Ebook Store Plugin up to 5.8001 on WordPress step cross site scripting

20.12.2024 23:34

A vulnerability classified as problematic has been found in Ebook Store Plugin up to 5.8001 on WordPress. Affected is an unknown function. The manipulation of the argument step leads to cross site scr...

CVE-2024-12697 | real.Kit Plugin up to 5.1.1 on WordPress cross site scripting

20.12.2024 23:34

A vulnerability was found in real.Kit Plugin up to 5.1.1 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. Th...

CVE-2024-11682 | G Web Pro Store Locator Plugin up to 2.1 on WordPress cross site scripting

20.12.2024 23:33

A vulnerability was found in G Web Pro Store Locator Plugin up to 2.1 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross site s...

CVE-2024-11938 | One Click Upsell Funnel Plugin up to 3.4.9 on WordPress Shortcode wps_wocuf_pro_yes cross site scripting

20.12.2024 23:31

A vulnerability was found in One Click Upsell Funnel Plugin up to 3.4.9 on WordPress. It has been classified as problematic. This affects the function wps_wocuf_pro_yes of the component Shortcode Hand...

CVE-2024-12066 | SMSA Shipping Plugin up to 2.2 on WordPress File file inclusion

20.12.2024 23:31

A vulnerability was found in SMSA Shipping Plugin up to 2.2 on WordPress and classified as critical. Affected by this issue is some unknown functionality of the component File Handler. The manipulatio...

CVE-2024-12635 | WP Docs Plugin up to 2.2.0 on WordPress dir_id sql injection

20.12.2024 23:31

A vulnerability has been found in WP Docs Plugin up to 2.2.0 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument dir_i...

CVE-2024-11349 | AdForest Plugin up to 5.1.6 on WordPress improper authentication

20.12.2024 23:30

A vulnerability, which was classified as critical, was found in AdForest Plugin up to 5.1.6 on WordPress. Affected is an unknown function. The manipulation leads to improper authentication. This vuln...

CVE-2024-11977 | kk Star Ratings Plugin up to 5.4.10 on WordPress Shortcode code injection

20.12.2024 23:30

A vulnerability, which was classified as critical, has been found in kk Star Ratings Plugin up to 5.4.10 on WordPress. This issue affects some unknown processing of the component Shortcode Handler. Th...

CVE-2024-10797 | Full Screen Menu for Elementor Plugin up to 1.0.7 on WordPress Post information disclosure

20.12.2024 23:30

A vulnerability classified as problematic was found in Full Screen Menu for Elementor Plugin up to 1.0.7 on WordPress. This vulnerability affects unknown code of the component Post Handler. The manipu...

CVE-2024-12771 | eCommerce Product Catalog Plugin up to 3.3.43 on WordPress Password Reset cross-site request forgery

20.12.2024 23:30

A vulnerability classified as problematic has been found in eCommerce Product Catalog Plugin up to 3.3.43 on WordPress. This affects an unknown part of the component Password Reset Handler. The manipu...

CVE-2024-12721 | Custom Product Tabs for WooCommerce Plugin up to 1.2.4 on WordPress code injection

20.12.2024 23:29

A vulnerability was found in Custom Product Tabs for WooCommerce Plugin up to 1.2.4 on WordPress. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation ...

CVE-2024-12582 | skupper improper authentication

20.12.2024 23:29

A vulnerability was found in skupper. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper authentication. This vulnerabili...

CVE-2020-13712 | Sierra Wireless MGOS up to 3.15.0/4.2.0 User Interface os command injection

20.12.2024 23:28

A vulnerability was found in Sierra Wireless MGOS up to 3.15.0/4.2.0. It has been classified as critical. Affected is an unknown function of the component User Interface. The manipulation leads to os ...

CVE-2021-40959 | Monitorapp Application Insight Web Application Firewall up to 4.1.6/5.0 process_status.xhr.php process cross site scripting

20.12.2024 23:28

A vulnerability was found in Monitorapp Application Insight Web Application Firewall up to 4.1.6/5.0 and classified as problematic. This issue affects some unknown processing of the file /process_mana...

CVE-2024-37758 | Digiteam 4.21.0.0 AddRoleMenu access control

20.12.2024 23:12

A vulnerability has been found in Digiteam 4.21.0.0 and classified as critical. This vulnerability affects unknown code of the file /RoleMenuMapping/AddRoleMenu. The manipulation leads to improper acc...

CVE-2024-12828 | Webmin CGI command injection (ZDI-24-1725)

20.12.2024 23:12

A vulnerability, which was classified as critical, was found in Webmin. This affects an unknown part of the component CGI Handler. The manipulation leads to command injection. This vulnerability is u...

CVE-2024-55341 | Piranha CMS 11.1 Markdown /manager/pages cross site scripting

20.12.2024 23:11

A vulnerability, which was classified as problematic, has been found in Piranha CMS 11.1. Affected by this issue is some unknown functionality of the file /manager/pages of the component Markdown Hand...

CVE-2024-55342 | Piranha CMS 11.1 PDF File /manager/media unrestricted upload

20.12.2024 23:11

A vulnerability classified as problematic was found in Piranha CMS 11.1. Affected by this vulnerability is an unknown functionality of the file /manager/media of the component PDF File Handler. The ma...

CVE-2024-40875 | Absolute Software Secure Access up to 13.51 Management Console cross site scripting

20.12.2024 23:10

A vulnerability classified as problematic has been found in Absolute Software Secure Access up to 13.51. Affected is an unknown function of the component Management Console. The manipulation leads to ...

CVE-2024-12867 | Arctic Security Arctic Hub up to 5.5.1872 Configuration server-side request forgery

20.12.2024 23:10

A vulnerability was found in Arctic Security Arctic Hub up to 5.5.1872. It has been rated as critical. This issue affects some unknown processing of the component Configuration Handler. The manipulati...

CVE-2024-56334 | sebhildebrandt systeminformation up to 5.23.6 getWindowsIEEE8021x code injection (GHSA-cvv5-9h9w-qp2m)

20.12.2024 23:09

A vulnerability was found in sebhildebrandt systeminformation up to 5.23.6. It has been declared as critical. This vulnerability affects the function getWindowsIEEE8021x. The manipulation leads to cod...

CVE-2024-56333 | InseeFrLab onyxia up to 2.8.1/3.1.0/4.1.x code injection (GHSA-qmcw-h4f9-j3h3)

20.12.2024 23:09

A vulnerability was found in InseeFrLab onyxia up to 2.8.1/3.1.0/4.1.x. It has been classified as critical. This affects an unknown part. The manipulation leads to code injection. This vulnerability ...

CVE-2024-56359 | gristlabs grist-core up to 1.3.1 HyperLink Cell cross site scripting (GHSA-qv69-5cj2-53r9)

20.12.2024 23:07

A vulnerability was found in gristlabs grist-core up to 1.3.1 and classified as problematic. Affected by this issue is some unknown functionality of the component HyperLink Cell Handler. The manipulat...

CVE-2024-56358 | gristlabs grist-core up to 1.3.1 SVG File cross site scripting (GHSA-jvfm-gf4f-33q3)

20.12.2024 23:06

A vulnerability has been found in gristlabs grist-core up to 1.3.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SVG File Handler. The mani...

CVE-2024-56329 | joelbutcher socialstream up to 6.1.x improper authentication (GHSA-3q97-vjpp-c8rp)

20.12.2024 23:04

A vulnerability, which was classified as critical, was found in joelbutcher socialstream up to 6.1.x. Affected is an unknown function. The manipulation leads to improper authentication. This vulnerab...

CVE-2024-56330 | spaceness stardust Inter Container Communication access control (GHSA-h2c9-7j2r-m98p)

20.12.2024 23:03

A vulnerability, which was classified as very critical, has been found in spaceness stardust. This issue affects some unknown processing of the component Inter Container Communication Handler. The man...

CVE-2024-56331 | louislam uptime-kuma 1.23.7/1.23.9 URL path traversal (GHSA-2qgm-m29m-cj2h)

20.12.2024 23:02

A vulnerability classified as critical was found in louislam uptime-kuma 1.23.7/1.23.9. This vulnerability affects unknown code of the component URL Handler. The manipulation leads to path traversal. ...

CVE-2024-56335 | dani-garcia vaultwarden up to 1.32.6 privileges management (GHSA-g65h-982x-4m5m)

20.12.2024 23:02

A vulnerability classified as critical has been found in dani-garcia vaultwarden up to 1.32.6. This affects an unknown part. The manipulation leads to improper privilege management. This vulnerabilit...

CVE-2024-56357 | gristlabs grist-core up to 1.3.0 javascript Scheme cross site scripting (GHSA-cq5q-cqr7-vmf6)

20.12.2024 23:02

A vulnerability was found in gristlabs grist-core up to 1.3.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component javascript Scheme Handler. The ma...

CVE-2024-55509 | CodeAstro Complaint Management System 1.0 delete.php id sql injection

20.12.2024 23:01

A vulnerability was found in CodeAstro Complaint Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file delete.php. The manipul...

CVE-2024-12834 | Delta Electronics DRASimuCAD STP File Parser type confusion (ZDI-24-1722)

20.12.2024 17:48

A vulnerability was found in Delta Electronics DRASimuCAD. It has been classified as very critical. Affected is an unknown function of the component STP File Parser. The manipulation leads to type con...

CVE-2024-12835 | Delta Electronics DRASimuCAD ICS File Parser out-of-bounds write (ZDI-24-1723)

20.12.2024 17:48

A vulnerability was found in Delta Electronics DRASimuCAD and classified as critical. This issue affects some unknown processing of the component ICS File Parser. The manipulation leads to out-of-boun...

CVE-2024-12836 | Delta Electronics DRASimuCAD STP File Parser type confusion (ZDI-24-1724)

20.12.2024 17:48

A vulnerability has been found in Delta Electronics DRASimuCAD and classified as very critical. This vulnerability affects unknown code of the component STP File Parser. The manipulation leads to type...

CVE-2024-56337 | Apache Tomcat up to 9.0.97/10.1.33/11.0.1 Incomplete Fix CVE-2024-50379 toctou (Nessus ID 213078)

20.12.2024 17:47

A vulnerability, which was classified as critical, was found in Apache Tomcat up to 9.0.97/10.1.33/11.0.1. This affects an unknown part of the component Incomplete Fix CVE-2024-50379. The manipulation...

CVE-2024-55186 | Oqtane Framework 6.0.0 Notifications resource injection

20.12.2024 17:46

A vulnerability, which was classified as problematic, has been found in Oqtane Framework 6.0.0. Affected by this issue is some unknown functionality of the component Notifications Handler. The manipul...

CVE-2024-10385 | DirectAdmin Evolution Skin up to 1.667 Ticket Management System cross site scripting

20.12.2024 17:46

A vulnerability classified as problematic was found in DirectAdmin Evolution Skin up to 1.667. Affected by this vulnerability is an unknown functionality of the component Ticket Management System. The...

CVE-2024-55470 | Oqtane Framework 6.0.0 Passcode Validation entityid access control

20.12.2024 17:46

A vulnerability classified as critical has been found in Oqtane Framework 6.0.0. Affected is an unknown function of the component Passcode Validation. The manipulation of the argument entityid leads t...

CVE-2024-55471 | Oqtane Framework Oqtane.Controllers.UserController id resource injection

20.12.2024 17:45

A vulnerability was found in Oqtane Framework. It has been rated as problematic. This issue affects the function Oqtane.Controllers.UserController. The manipulation of the argument id leads to imprope...

CVE-2024-12840 | Red Hat Satellite HTTP Proxy server-side request forgery

20.12.2024 16:06

A vulnerability was found in Red Hat Satellite. It has been declared as critical. This vulnerability affects unknown code of the component HTTP Proxy. The manipulation leads to server-side request for...

CVE-2024-56356 | JetBrains TeamCity up to 2024.11 XMLParser xml external entity reference

20.12.2024 16:06

A vulnerability was found in JetBrains TeamCity up to 2024.11. It has been classified as problematic. This affects an unknown part of the component XMLParser. The manipulation leads to xml external en...

CVE-2024-56352 | JetBrains TeamCity up to 2024.11 Agent Details Page image name cross site scripting

20.12.2024 16:05

A vulnerability was found in JetBrains TeamCity up to 2024.11 and classified as problematic. Affected by this issue is some unknown functionality of the component Agent Details Page. The manipulation ...

CVE-2024-56355 | JetBrains TeamCity up to 2024.11 Header RemoteBuildLogController Content-Type cross site scripting

20.12.2024 16:05

A vulnerability has been found in JetBrains TeamCity up to 2024.11 and classified as problematic. Affected by this vulnerability is the function RemoteBuildLogController of the component Header Handle...

CVE-2024-56354 | JetBrains TeamCity up to 2024.11 Password Field insufficiently protected credentials

20.12.2024 16:05

A vulnerability, which was classified as problematic, was found in JetBrains TeamCity up to 2024.11. Affected is an unknown function of the component Password Field Handler. The manipulation leads to ...

CVE-2024-56353 | JetBrains TeamCity up to 2024.11 Backup File improper removal of sensitive information before storage or transfer

20.12.2024 16:05

A vulnerability, which was classified as problematic, has been found in JetBrains TeamCity up to 2024.11. This issue affects some unknown processing of the component Backup File Handler. The manipulat...

CVE-2024-56351 | JetBrains TeamCity up to 2024.11 Access Token session expiration

20.12.2024 16:03

A vulnerability classified as critical was found in JetBrains TeamCity up to 2024.11. This vulnerability affects unknown code of the component Access Token Handler. The manipulation leads to session e...

CVE-2024-56350 | JetBrains TeamCity up to 2024.11 Project authorization

20.12.2024 16:03

A vulnerability classified as problematic has been found in JetBrains TeamCity up to 2024.11. This affects an unknown part of the component Project Handler. The manipulation leads to incorrect authori...

CVE-2024-40695 | IBM Cognos Analytics up to 11.2.4 FP4/12.0.4 Executable File unrestricted upload

20.12.2024 16:02

A vulnerability was found in IBM Cognos Analytics up to 11.2.4 FP4/12.0.4. It has been rated as critical. Affected by this issue is some unknown functionality of the component Executable File Handler....

CVE-2024-56348 | JetBrains TeamCity up to 2024.11 Agent authorization

20.12.2024 16:02

A vulnerability was found in JetBrains TeamCity up to 2024.11. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Agent Handler. The manip...

CVE-2024-12014 | Lleidanet PKI eSigna up to 5.4.0 eSignaViewer path traversal

20.12.2024 16:02

A vulnerability was found in Lleidanet PKI eSigna up to 5.4.0. It has been classified as problematic. Affected is an unknown function of the component eSignaViewer. The manipulation leads to path trav...

CVE-2024-56349 | JetBrains TeamCity up to 2024.11 Build Log authorization

20.12.2024 16:01

A vulnerability was found in JetBrains TeamCity up to 2024.11 and classified as problematic. This issue affects some unknown processing of the component Build Log Handler. The manipulation leads to mi...

CVE-2024-51466 | IBM Cognos Analytics up to 11.2.4 FP4/12.0.4 EL expression language injection

20.12.2024 16:01

A vulnerability has been found in IBM Cognos Analytics up to 11.2.4 FP4/12.0.4 and classified as critical. This vulnerability affects unknown code of the component EL Handler. The manipulation leads t...

CVE-2024-28767 | IBM Security Directory Integrator up to 7.2.0.13/10.0.3 Request os command injection

20.12.2024 16:01

A vulnerability, which was classified as critical, was found in IBM Security Directory Integrator up to 7.2.0.13/10.0.3. This affects an unknown part of the component Request Handler. The manipulation...

CVE-2024-12846 | Emlog Pro up to 2.4.1 /admin/link.php siteurl/icon cross site scripting

20.12.2024 13:41

A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Affected by this issue is some unknown functionality of the file /admin/link.php. The manipulation of the...

CVE-2024-12845 | Emlog Pro up to 2.4.1 /include/lib/common.php msg cross site scripting

20.12.2024 13:41

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Affected by this vulnerability is an unknown functionality in the library /include/lib/common.php. The manipulation of the...

CVE-2024-12844 | Emlog Pro up to 2.4.1 /admin/store.php tag cross site scripting

20.12.2024 13:41

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.1. Affected is an unknown function of the file /admin/store.php. The manipulation of the argument tag leads to cross sit...

CVE-2024-12843 | Emlog Pro up to 2.4.1 /admin/plugin.php filter cross site scripting

20.12.2024 13:41

A vulnerability was found in Emlog Pro up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/plugin.php. The manipulation of the argument filter ...

CVE-2024-12842 | Emlog Pro up to 2.4.1 /admin/user.php keyword cross site scripting

20.12.2024 13:41

A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user.php. The manipulation of the argument keyword l...

CVE-2024-12841 | Emlog Pro up to 2.4.1 /admin/tag.php keyword cross site scripting

20.12.2024 13:41

A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cr...

CVE-2024-11811 | Feedify Plugin up to 2.4.2 on WordPress cross site scripting

20.12.2024 13:24

A vulnerability was found in Feedify Plugin up to 2.4.2 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting...

CVE-2024-7726 | Kioxia CM6/PM7/PM6 up to 1.66.1 JTAG Port missing authentication (GHSA-3hh8-94j4-62rh)

20.12.2024 13:23

A vulnerability has been found in Kioxia CM6, PM7 and PM6 up to 1.66.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component JTAG Port. The manipulati...

CVE-2024-44292 | Apple macOS up to 15.0 log file

20.12.2024 08:06

A vulnerability, which was classified as problematic, was found in Apple macOS up to 15.0. Affected is an unknown function. The manipulation leads to sensitive information in log files. This vulnerab...

CVE-2024-44211 | Apple macOS up to 15.0 App symlink

20.12.2024 08:06

A vulnerability, which was classified as critical, has been found in Apple macOS up to 15.0. This issue affects some unknown processing of the component App. The manipulation leads to symlink followin...

CVE-2024-44195 | Apple macOS up to 15.0 App information disclosure

20.12.2024 08:05

A vulnerability classified as problematic was found in Apple macOS up to 15.0. This vulnerability affects unknown code of the component App. The manipulation leads to information disclosure. This vul...

CVE-2023-42867 | Apple GarageBand up to 10.4.8 App Local Privilege Escalation

20.12.2024 08:05

A vulnerability classified as critical has been found in Apple GarageBand up to 10.4.8. This affects an unknown part of the component App. The manipulation leads to Local Privilege Escalation. This v...

CVE-2024-44293 | Apple macOS up to 15.0 log file

20.12.2024 08:05

A vulnerability was found in Apple macOS up to 15.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to sensitive information in log file...

CVE-2024-44298 | Apple macOS up to 15.0 log file

20.12.2024 08:05

A vulnerability was found in Apple macOS up to 15.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive information in...

CVE-2024-44231 | Apple macOS up to 15.0 Login Window state issue

20.12.2024 08:05

A vulnerability was found in Apple macOS up to 15.0. It has been classified as problematic. Affected is an unknown function of the component Login Window. The manipulation leads to state issue. This ...

CVE-2024-44223 | Apple macOS up to 15.0 Login Window state issue

20.12.2024 08:04

A vulnerability was found in Apple macOS up to 15.0 and classified as problematic. This issue affects some unknown processing of the component Login Window. The manipulation leads to state issue. The...

CVE-2020-9250 | Huawei Mate 20 Pro 9.1.0.135(C00E133R3P1)/10.0.0.175(C00E69R3P8) Software Package improper authentication (sa-20200729-01)

20.12.2024 07:55

A vulnerability has been found in Huawei Mate 20 Pro 9.1.0.135(C00E133R3P1)/10.0.0.175(C00E69R3P8) and classified as problematic. This vulnerability affects unknown code of the component Software Pack...

CVE-2024-5955 | Trellix ePolicy Orchestrator up to 5.10 Service Pack 1 Update 2 cross site scripting

20.12.2024 07:54

A vulnerability, which was classified as problematic, was found in Trellix ePolicy Orchestrator up to 5.10 Service Pack 1 Update 2. This affects an unknown part. The manipulation leads to cross site s...

CVE-2024-12831 | Arista NG Firewall 17.1.1 uvm_login authorization (ZDI-24-1720)

20.12.2024 07:53

A vulnerability, which was classified as problematic, has been found in Arista NG Firewall 17.1.1. Affected by this issue is the function uvm_login. The manipulation leads to incorrect authorization. ...

CVE-2024-8968 | MaxButtons Button Plugin up to 9.8.0 on WordPress Setting cross site scripting

20.12.2024 07:53

A vulnerability classified as problematic was found in MaxButtons Button Plugin up to 9.8.0 on WordPress. Affected by this vulnerability is an unknown functionality of the component Setting Handler. T...