U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results (Refine Search)

Search Parameters:
There are 232,251 matching records.
Displaying matches 1,101 through 1,120.
Vuln ID Summary CVSS Severity
CVE-2024-27985

Deserialization of Untrusted Data vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.9.

Published: April 10, 2024; 9:25:07 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-27970

Missing Authorization vulnerability in BogdanFix WP SendFox.This issue affects WP SendFox: from n/a through 1.3.0.

Published: April 10, 2024; 9:25:06 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-27969

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Enhanced Free Downloads WooCommerce allows Stored XSS.This issue affects Free Downloads WooCommerce: from n/a through 3.5.8.2.

Published: April 10, 2024; 9:25:06 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-27967

Cross-Site Request Forgery (CSRF) vulnerability in Michael Leithold DSGVO All in one for WP.This issue affects DSGVO All in one for WP: from n/a through 4.3.

Published: April 10, 2024; 9:25:06 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-27966

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 8.2.2.

Published: April 10, 2024; 9:25:06 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-27683

D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger the vulnerablilify.

Published: April 10, 2024; 9:25:05 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-25935

Missing Authorization vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.2.5.9.

Published: April 10, 2024; 9:24:58 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-25922

Missing Authorization vulnerability in Peach Payments Peach Payments Gateway.This issue affects Peach Payments Gateway: from n/a through 3.1.9.

Published: April 10, 2024; 9:24:57 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-25912

Missing Authorization vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.

Published: April 10, 2024; 9:24:57 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-25908

Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.

Published: April 10, 2024; 9:24:57 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-25907

Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.

Published: April 10, 2024; 9:24:57 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-24883

Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.11.10.

Published: April 10, 2024; 9:24:53 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-24850

Missing Authorization vulnerability in Mark Stockton Quicksand Post Filter jQuery Plugin.This issue affects Quicksand Post Filter jQuery Plugin: from n/a through 3.1.1.

Published: April 10, 2024; 9:24:53 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2023-51672

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.

Published: April 10, 2024; 9:22:45 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2023-51142

An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information.

Published: April 10, 2024; 9:22:43 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2023-51141

An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorization component

Published: April 10, 2024; 9:22:43 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2023-27607

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0.

Published: April 10, 2024; 9:19:19 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2022-47604

Missing Authorization vulnerability in junkcoder, ristoniinemets AJAX Thumbnail Rebuild.This issue affects AJAX Thumbnail Rebuild: from n/a through 1.13.

Published: April 10, 2024; 9:17:17 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2022-44633

Missing Authorization vulnerability in YITH YITH WooCommerce Gift Cards Premium.This issue affects YITH WooCommerce Gift Cards Premium: from n/a through 3.23.1.

Published: April 10, 2024; 9:17:02 PM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-3613

A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file supplier.php. The manipulation of the argument nama_supplier/alamat_supplier/notelp_supplier leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-260270 is the identifier assigned to this vulnerability.

Published: April 10, 2024; 8:15:07 PM -0400
V3.x:(not available)
V2.0:(not available)