|
310561
|
5.5 |
MEDIUM
Local
|
cisco
|
ios_xr
|
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the file system of the underlying Linux operating system. The attacker must have v…
|
NVD-CWE-noinfo
|
CVE-2024-20343
|
2024-10-8 02:42 |
2024-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310562
|
5.4 |
MEDIUM
Network
|
hasthemes
|
woolentor_-_woocommerce_elementor_addons_\+_builder
|
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tooltip…
|
CWE-79
Cross-site Scripting
|
CVE-2024-8668
|
2024-10-8 02:28 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310563
|
4.3 |
MEDIUM
Network
|
vladyslavbondarenko
|
adstxt
|
The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
|
CWE-352
Origin Validation Error
|
CVE-2024-7892
|
2024-10-8 02:26 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310564
|
9.8 |
CRITICAL
Network
|
dataease
|
dataease
|
DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection stri…
|
NVD-CWE-noinfo
|
CVE-2024-46997
|
2024-10-8 02:20 |
2024-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310565
|
9.1 |
CRITICAL
Network
|
circutor
|
tcp2rs\+_firmware
|
Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/password authentication option enabled, witho…
|
NVD-CWE-noinfo
|
CVE-2024-8892
|
2024-10-8 02:10 |
2024-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310566
|
9.1 |
CRITICAL
Network
|
circutor
|
tcp2rs\+_firmware
|
Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/password authentication option enabled, witho…
|
NVD-CWE-noinfo
|
CVE-2024-8889
|
2024-10-8 02:09 |
2024-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310567
|
6.1 |
MEDIUM
Network
|
wireui
|
wireui
|
Wire UI is a library of components and resources to empower Laravel and Livewire application development. A potential Cross-Site Scripting (XSS) vulnerability has been identified in the `/wireui/butt…
|
CWE-79
Cross-site Scripting
|
CVE-2024-45803
|
2024-10-8 02:05 |
2024-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310568
|
5.3 |
MEDIUM
Network
|
smartsearchwp
|
smartsearchwp
|
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, t…
|
CWE-862
Missing Authorization
|
CVE-2024-6845
|
2024-10-8 01:58 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310569
|
4.8 |
MEDIUM
Network
|
ronvalstar
|
pocket_widget
|
The Pocket Widget WordPress plugin through 0.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks…
|
CWE-79
Cross-site Scripting
|
CVE-2024-7918
|
2024-10-8 01:56 |
2024-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310570
|
4.6 |
MEDIUM
Local
|
tenable
|
nessus_network_monitor
|
A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI.
|
CWE-79
Cross-site Scripting
|
CVE-2024-9158
|
2024-10-8 01:13 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
