漏洞标题 CVE-2024-1208: LearnDash LMS < 4.10.3 - Sensitive Information Exposure 漏洞描述 The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure i...

漏洞标题 CVE-2024-1208: LearnDash LMS < 4.10.3 - Sensitive Information Exposure 漏洞描述 The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure i...

漏洞标题 CVE-2024-36675: LyLme spage v1.9.5 - Server-Side Request Forgery 漏洞描述 LyLme spage v1.9.5 is vulnerable to server-side request forgery (SSRF) via the url parameter in a...

漏洞标题 CVE-2024-39646: WordPress Custom 404 Pro <= 3.11.1 - Reflected XSS 漏洞描述 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripti...

漏洞标题 CVE-2024-39887: Apache Superset < 4.0.2 - SQL Injection 漏洞描述 An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elem...

漏洞标题 CVE-2024-51228: TOTOLINK CX-A3002RU - Remote Code Execution 漏洞描述 An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and...

漏洞标题 CVE-2024-36404: GeoServer and GeoTools - Remote Code Execution 漏洞描述 GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions ...

漏洞标题 CVE-2024-13496: GamiPress <= 2.8.9 - SQL Injection 漏洞描述 GamiPress WordPress plugin version 2.8.9 and below suffers from an SQL injection vulnerability due to insuff...

漏洞标题 Check Point Security Gateways CVE-2024-24919 任意文件读取漏洞 漏洞描述 Check Point Security Gateways中存在任意文件读取漏洞，此漏洞是由于MyCRL接口未充分验证用户输入的数据所...

漏洞标题 CVE-2024-25852: Linksys RE7000 - Command Injection 漏洞描述 Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlLi...

漏洞标题 CVE-2024-0799: Arcserve Unified Data Protection - Authentication Bypass 漏洞描述 An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and ...

漏洞标题 CVE-2024-3272: D-Link Network Attached Storage - Backdoor Account 漏洞描述 A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-3...

漏洞标题 CVE-2024-0250: Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect 漏洞描述 The plugin is vulnerable to Open Redirect due to insufficient validation on the ...

漏洞标题 CVE-2024-4956: Sonatype Nexus Repository Manager 3 - Local File Inclusion 漏洞描述 Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read...

漏洞标题 CVE-2024-50498: WP Query Console <= 1.0 - Remote Code Execution 漏洞描述 Improper Control of Generation of Code ('Code Injection') vulnerability in LUBUS WP Q...

漏洞标题 CVE-2024-7714: AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls 漏洞描述 The plugin lacks sufficient access controls allowing an unauthenticated u...