|
312151
|
9.8 |
CRITICAL
Network
|
dataease
|
dataease
|
DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection stri…
|
NVD-CWE-noinfo
|
CVE-2024-46997
|
2024-10-8 02:20 |
2024-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312152
|
9.1 |
CRITICAL
Network
|
circutor
|
tcp2rs\+_firmware
|
Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/password authentication option enabled, witho…
|
NVD-CWE-noinfo
|
CVE-2024-8892
|
2024-10-8 02:10 |
2024-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312153
|
9.1 |
CRITICAL
Network
|
circutor
|
tcp2rs\+_firmware
|
Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/password authentication option enabled, witho…
|
NVD-CWE-noinfo
|
CVE-2024-8889
|
2024-10-8 02:09 |
2024-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312154
|
6.1 |
MEDIUM
Network
|
wireui
|
wireui
|
Wire UI is a library of components and resources to empower Laravel and Livewire application development. A potential Cross-Site Scripting (XSS) vulnerability has been identified in the `/wireui/butt…
|
CWE-79
Cross-site Scripting
|
CVE-2024-45803
|
2024-10-8 02:05 |
2024-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312155
|
5.3 |
MEDIUM
Network
|
smartsearchwp
|
smartsearchwp
|
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, t…
|
CWE-862
Missing Authorization
|
CVE-2024-6845
|
2024-10-8 01:58 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312156
|
4.8 |
MEDIUM
Network
|
ronvalstar
|
pocket_widget
|
The Pocket Widget WordPress plugin through 0.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks…
|
CWE-79
Cross-site Scripting
|
CVE-2024-7918
|
2024-10-8 01:56 |
2024-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312157
|
4.6 |
MEDIUM
Local
|
tenable
|
nessus_network_monitor
|
A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI.
|
CWE-79
Cross-site Scripting
|
CVE-2024-9158
|
2024-10-8 01:13 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312158
|
5.4 |
MEDIUM
Network
|
kvf-admin_project
|
kvf-admin
|
A vulnerability classified as problematic has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff. Affected is an unknown function of the file /ueditor/upload?configPath=…
|
CWE-79
Cross-site Scripting
|
CVE-2024-9291
|
2024-10-8 01:13 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312159
|
4.3 |
MEDIUM
Network
|
digireturn
|
dn_popup
|
The DN Popup WordPress plugin through 1.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
|
CWE-352
Origin Validation Error
|
CVE-2024-7690
|
2024-10-8 00:56 |
2024-09-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312160
|
4.8 |
MEDIUM
Network
|
wow-company
|
viral_signup
|
The Viral Signup WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks e…
|
CWE-79
Cross-site Scripting
|
CVE-2024-6927
|
2024-10-8 00:56 |
2024-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
