Common Vulnerabilities and Exposures (CVE)

CVE-2024-43489

Sep 20, 2024 13:38:11 UTC

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2024-43496

Sep 20, 2024 13:37:42 UTC

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2023-42771

Sep 20, 2024 13:36:28 UTC

Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the affected product to download configuration...

CVE-2023-41733

Sep 20, 2024 13:36:19 UTC

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in YYDevelopment Back To The Top Button plugin <= 2.1.5 versions.

CVE-2024-46978

Sep 20, 2024 13:34:31 UTC

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing the ID of a notification filter preference of another user, to enable/disable it or even delete it. ...

CVE-2023-35803

Sep 20, 2024 13:34:09 UTC

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.

CVE-2024-9008

Sep 20, 2024 13:27:53 UTC

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name le...

CVE-2024-9009

Sep 20, 2024 13:26:16 UTC

A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the argument subid leads to sql injection. The...

CVE-2023-41729

Sep 20, 2024 13:20:49 UTC

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions.

CVE-2023-41692

Sep 20, 2024 13:20:17 UTC

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hennessey Digital Attorney theme <= 3 theme.

CVE-2023-37891

Sep 20, 2024 13:18:52 UTC

Cross-Site Request Forgery (CSRF) vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin <= 2.0.4 versions.

CVE-2023-40009

Sep 20, 2024 13:18:37 UTC

Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Pipes plugin <= 1.4.0 versions.

CVE-2023-32091

Sep 20, 2024 13:18:21 UTC

Cross-Site Request Forgery (CSRF) vulnerability in POEditor plugin <= 0.9.4 versions.

CVE-2023-27435

Sep 20, 2024 13:18:03 UTC

Cross-Site Request Forgery (CSRF) vulnerability in Sami Ahmed Siddiqui HTTP Auth plugin <= 0.3.2 versions.

CVE-2023-37991

Sep 20, 2024 13:17:14 UTC

Cross-Site Request Forgery (CSRF) vulnerability in Monchito.Net WP Emoji One plugin <= 0.6.0 versions.