VYPR

CVEs

113,594 total · page 1008 of 2,272

AllCriticalHighKEV
  • CVE-2024-30604HigMar 28, 2024
    Tenda
    FH1203
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the list1 parameter of the fromDhcpListClient function.

  • CVE-2024-30601HigMar 28, 2024
    Tenda
    FH1203
    risk 0.52cvss 8.0epss 0.01

    Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function.

  • CVE-2024-30600HigMar 28, 2024
    Tenda
    FH1203
    risk 0.52cvss 8.0epss 0.01

    Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function.

  • CVE-2024-30599HigMar 28, 2024
    Tenda
    FH1203
    risk 0.57cvss 8.8epss 0.01

    Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function.

  • CVE-2024-0259HigMar 28, 2024
    Fortra
    Robot Schedule
    risk 0.47cvss 7.3epss 0.00

    Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a…

  • CVE-2024-30607HigMar 28, 2024
    Tenda
    FH1203
    risk 0.52cvss 8.0epss 0.01

    Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function.

  • CVE-2024-30606HigMar 28, 2024
    Tenda
    FH1203
    risk 0.52cvss 8.0epss 0.01

    Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the page parameter of the fromDhcpListClient function.

  • CVE-2024-30592HigMar 28, 2024
    Tenda
    FH1202
    risk 0.52cvss 8.0epss 0.01

    Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the page parameter of the fromAddressNat function.

  • CVE-2024-30591HigMar 28, 2024
    Tenda
    FH1202
    risk 0.57cvss 8.8epss 0.01

    Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function.

  • CVE-2024-30583HigMar 28, 2024
    Tenda
    FH1202
    risk 0.52cvss 8.0epss 0.01

    Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the mitInterface parameter of the fromAddressNat function.

  • CVE-2024-29882HigMar 28, 2024
    Oscc
    Srs
    risk 0.00cvss 7.2epss 0.01

    SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/vid-?callback=` endpoint didn't filter the callback function name which led to injecting malicious javascript payloads and executing XSS ( Cross-Site Scripting). This vulnerability is…

  • CVE-2024-28109HigMar 28, 2024
    Verapdf
    Verapdf Library
    risk 0.46cvss 8.1epss 0.01

    veraPDF-library is a PDF/A validation library. Executing policy checks using custom schematron files invokes an XSL transformation that could lead to a remote code execution (RCE) vulnerability. This vulnerability is fixed in 1.24.2.

  • CVE-2024-29896HigMar 28, 2024
    Kindspells
    Astro Shield
    risk 0.42cvss 7.5epss 0.01

    Astro-Shield is a library to compute the subresource integrity hashes for your JS scripts and CSS stylesheets. When automated CSP headers generation for SSR content is enabled and the web application serves content that can be partially controlled by external users, then it is…

  • CVE-2024-27775HigMar 28, 2024
    Sysaid
    Sysaid
    risk 0.47cvss 7.2epss 0.01

    SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's NTLMv2 hash

  • CVE-2023-6371HigMar 28, 2024
    GitLab Inc.
    GitLab
    risk 0.57cvss 8.7epss 0.00

    An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. A wiki page with a crafted payload may lead to a Stored XSS, allowing attackers to perform arbitrary…

  • CVE-2023-52628HigMar 28, 2024
    Linux
    Kernel
    risk 0.51cvss 7.8epss 0.01

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which leads to stack corruption. This construct is necessary to…

  • CVE-2024-29229HigMar 28, 2024
    Synology
    Surveillance Station
    risk 0.50cvss 7.7epss 0.01

    Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors.

  • CVE-2024-29228HigMar 28, 2024
    Synology
    Surveillance Station
    risk 0.50cvss 7.7epss 0.01

    Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors.

  • CVE-2024-28002HigMar 28, 2024
    WordPress
    Cornerstone
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0.

  • CVE-2024-28001HigMar 28, 2024
    WordPress
    Favicon Rotator
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Favicon Rotator allows Reflected XSS.This issue affects Favicon Rotator: from n/a through 1.2.10.

  • CVE-2024-27999HigMar 28, 2024
    WordPress
    Preview E-Mails for WooCommerce
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digamber Pradhan Preview E-mails for WooCommerce allows Reflected XSS.This issue affects Preview E-mails for WooCommerce: from n/a through 2.2.1.

  • CVE-2024-25924HigMar 28, 2024
    WordPress
    WP Testimonials
    risk 0.49cvss 7.6epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Trustindex.Io WP Testimonials.This issue affects WP Testimonials: from n/a through 1.4.3.

  • CVE-2024-25599HigMar 28, 2024
    Castos
    Seriously Simple Podcasting
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting.This issue affects Seriously Simple Podcasting: from n/a through <= 3.0.2.

  • CVE-2023-39309HigMar 28, 2024
    Avada
    Fusion Builder
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.

  • CVE-2023-23649HigMar 28, 2024
    WordPress
    Mainwp Links Manager Extension
    risk 0.53cvss 8.1epss 0.01

    Deserialization of Untrusted Data vulnerability in MainWP MainWP Links Manager Extension.This issue affects MainWP Links Manager Extension: from n/a through 2.1.

  • CVE-2024-30200HigMar 28, 2024
    Realmag777
    BEAR
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2.

  • CVE-2024-23500HigMar 28, 2024
    WordPress
    Gutenberg Blocks by Kadence Blocks
    risk 0.50cvss 7.7epss 0.01

    Server-Side Request Forgery (SSRF) vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through <= 3.2.19.

  • CVE-2023-39313HigMar 28, 2024
    Theme Fusion
    Avada
    risk 0.50cvss 7.7epss 0.01

    Server-Side Request Forgery (SSRF) vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

  • CVE-2023-36679HigMar 28, 2024
    Brainstormforce
    Spectra
    risk 0.46cvss 7.1epss 0.00

    Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6.

  • CVE-2023-34370HigMar 28, 2024
    WordPress
    Starter Templates — Elementor, WordPress & Beaver Builder Templates
    risk 0.46cvss 7.1epss 0.00

    Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from…

  • CVE-2024-30245HigMar 28, 2024
    WordPress
    Decalog
    risk 0.49cvss 7.6epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pierre Lannoy DecaLog decalog.This issue affects DecaLog: from n/a through <= 3.9.0.

  • CVE-2024-30244HigMar 28, 2024
    Church Admin Project
    Church Admin
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.

  • CVE-2024-30243HigMar 28, 2024
    WordPress
    Wordpress Tooltips
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tomas WordPress Tooltips.This issue affects WordPress Tooltips: from n/a before 9.4.5.

  • CVE-2024-30242HigMar 28, 2024
    WordPress
    Contact Form To Any API
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions Contact Form to Any API.This issue affects Contact Form to Any API: from n/a through 1.1.8.

  • CVE-2024-30241HigMar 28, 2024
    Metagauss
    Profilegrid
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1.

  • CVE-2024-30240HigMar 28, 2024
    WordPress
    Calendarista
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Typps Calendarista.This issue affects Calendarista: from n/a through 15.5.7.

  • CVE-2024-30239HigMar 28, 2024
    WordPress
    Zoho Campaigns
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.6.

  • CVE-2024-30237HigMar 28, 2024
    WordPress
    Slider By Supsystic
    risk 0.49cvss 7.6epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Supsystic Slider by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.10.

  • CVE-2024-30236HigMar 28, 2024
    Contest Gallery
    Contest Gallery
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.

  • CVE-2024-30230HigMar 28, 2024
    Acowebs
    PDF Invoices And Packing Slips For Woocommerce
    risk 0.53cvss 8.2epss 0.01

    Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through 1.3.7.

  • CVE-2024-30229HigMar 28, 2024
    Givewp
    Givewp
    risk 0.52cvss 8.0epss 0.01

    Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.4.2.

  • CVE-2024-30222HigMar 28, 2024
    Reputeinfosystems
    Armember
    risk 0.55cvss 8.5epss 0.01

    Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.

  • CVE-2024-0672HigMar 28, 2024
    WordPress
    Pz Linkcard
    risk 0.46cvss 7.1epss 0.00

    The Pz-LinkCard WordPress plugin through 2.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

  • CVE-2024-1770HigMar 28, 2024
    WordPress
    Meta Tag Manager
    risk 0.50cvss 8.8epss 0.01

    The Meta Tag Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.2 via deserialization of untrusted input in the get_post_data function. This makes it possible for authenticated attackers, with contributor access or…

  • CVE-2024-3012HigMar 28, 2024
    Tenda
    FH1205
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been declared as critical. This vulnerability affects the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. The attack…

  • CVE-2024-3011HigMar 28, 2024
    Tenda
    FH1205
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate…

  • CVE-2024-3010HigMar 28, 2024
    Tenda
    FH1205
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda FH1205 2.0.0.7(775) and classified as critical. Affected by this issue is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely.…

  • CVE-2024-0980HigMar 28, 2024
    Okta
    Okta Verify for Windows
    risk 0.46cvss 7.1epss 0.00

    The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code.

  • CVE-2024-3008HigMar 27, 2024
    Tenda
    FH1205
    risk 0.57cvss 8.8epss 0.02

    A vulnerability, which was classified as critical, was found in Tenda FH1205 2.0.0.7(775). Affected is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to launch the attack…

  • CVE-2024-3007HigMar 27, 2024
    Tenda
    FH1205
    risk 0.57cvss 8.8epss 0.02

    A vulnerability, which was classified as critical, has been found in Tenda FH1205 2.0.0.7(775). This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack may…