Skip to content
OpenAdvisories

Archive

10 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /10 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

26 results · Clear filters · Feed

  • Medium 6.2
    CVE-2024-22313

    IBM Storage Defender - Resiliency Service information disclosure

    IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Forc…

    IBM Storage Defender - Resiliency Service
  • Medium 4.4
    CVE-2024-22312

    IBM Storage Defender - Resiliency Service information disclosure

    IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 278748.

    IBM Storage Defender - Resiliency Service
  • Medium 5.9
    CVE-2024-22361

    IBM Semeru Runtime information disclosure

    IBM Semeru Runtime 8.0.302.0 through 8.0.392.0, 11.0.12.0 through 11.0.21.0, 17.0.1.0 - 17.0.9.0, and 21.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 281222.

    IBM Semeru Runtime
  • Medium 6.5
    CVE-2023-51404

    WordPress My Agile Privacy Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyAgilePrivacy My Agile Privacy – The only GDPR solution for WordPress that you can truly trust allows Stored XSS.This issue affects My Agile Privacy – The o…

    MyAgilePrivacy My Agile Privacy – The only GDPR solution for WordPress that you can truly trust Web / CMS
  • Medium 6.5
    CVE-2023-51415

    WordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform allows Stored XSS.This issue affects GiveWP – Donation Plugin and Fundraising Platform: from n/a thr…

    GiveWP GiveWP – Donation Plugin and Fundraising Platform
  • Medium 6.5
    CVE-2023-51480

    WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store allows Stored XSS.This issue affects Active Products Ta…

    RealMag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store Web / CMS
  • Medium 6.5
    CVE-2023-51485

    WordPress Pay with Vipps for WooCommerce Plugin <= 1.14.13 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Hosting Pay with Vipps and MobilePay for WooCommerce allows Stored XSS.This issue affects Pay with Vipps and MobilePay for WooCommerce: from n/a through 1…

    WP Hosting AS Pay with Vipps and MobilePay for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2023-51492

    WordPress If-So Dynamic Content Personalization Plugin <= 1.6.3.1 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6.3.1.

    If So Plugin If-So Dynamic Content Personalization
  • Medium 6.5
    CVE-2023-51493

    WordPress Custom Post Carousels with Owl Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Howard Ehrenberg Custom Post Carousels with Owl allows Stored XSS.This issue affects Custom Post Carousels with Owl: from n/a through 1.4.6.

    Howard Ehrenberg Custom Post Carousels with Owl
  • Medium 6.5
    CVE-2024-23514

    WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ClickToTweet.Com Click To Tweet allows Stored XSS.This issue affects Click To Tweet: from n/a through 2.0.14.

    ClickToTweet.com Click To Tweet
  • Medium 6.5
    CVE-2024-23516

    WordPress CC BMI Calculator Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Calculators World CC BMI Calculator allows Stored XSS.This issue affects CC BMI Calculator: from n/a through 2.0.1.

    Calculators World CC BMI Calculator
  • Medium 6.5
    CVE-2024-23517

    WordPress Scheduling Plugin – Online Booking for WordPress Plugin <= 3.5.10 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Start Booking Scheduling Plugin – Online Booking for WordPress allows Stored XSS.This issue affects Scheduling Plugin – Online Booking for WordPress: from n/…

    Start Booking Scheduling Plugin – Online Booking for WordPress Web / CMS
  • Medium 6.5
    CVE-2024-24712

    WordPress Heateor Social Login Plugin <= 1.1.30 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Heateor Social Login WordPress allows Stored XSS.This issue affects Heateor Social Login WordPress: from n/a through 1.1.30.

    Team Heateor Heateor Social Login WordPress Web / CMS
  • Medium 6.5
    CVE-2024-24713

    WordPress Auto Listings Plugin <= 2.6.5 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Auto Listings Auto Listings – Car Listings & Car Dealership Plugin for WordPress allows Stored XSS.This issue affects Auto Listings – Car Listings & Car D…

    WP Auto Listings Auto Listings – Car Listings & Car Dealership Plugin for WordPress Web / CMS
  • Medium 5.9
    CVE-2024-24717

    WordPress Beds24 Online Booking Plugin <= 2.0.23 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.23.

    Mark Kinchin Beds24 Online Booking
  • Medium 6.5
    CVE-2024-24801

    WordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.…

    logichunt OWL Carousel – WordPress Owl Carousel Slider Web / CMS
  • Medium 6.5
    CVE-2024-24803

    WordPress Ultra Companion Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPoperation Ultra Companion – Companion plugin for WPoperation Themes allows Stored XSS.This issue affects Ultra Companion – Companion plugin for WPoperation…

    WPoperation Ultra Companion – Companion plugin for WPoperation Themes
  • Medium 6.5
    CVE-2024-24804

    WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in websoudan MW WP Form allows Stored XSS.This issue affects MW WP Form: from n/a through 5.0.6.

    websoudan MW WP Form
  • Medium 6.5
    CVE-2024-24831

    WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for Elementor: from n/a through <= 4.10.16.

    leap13 Premium Addons for Elementor
  • Medium 4.3
    CVE-2024-1406

    Linksys WRT54GL Web Management Interface SysInfo1.htm information disclosure

    A vulnerability was found in Linksys WRT54GL 4.30.18. It has been declared as problematic. This vulnerability affects unknown code of the file /SysInfo1.htm of the component Web Management Interface. The manipulation leads to information disclosure. The explo…

    Linksys WRT54GL
  • Medium 5.3
    CVE-2024-0596

    Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()

    The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editor_html() function in all versions up to, and including, 6.1.7. This makes it possible for…

    Awesome Support Awesome Support – WordPress HelpDesk & Support Plugin Web / CMS
  • Medium 4.3
    CVE-2024-0595

    Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()

    The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpas_get_users() function hooked via AJAX in all versions up to, and including, 6.1.7. This makes it p…

    Awesome Support Awesome Support – WordPress HelpDesk & Support Plugin Web / CMS
  • Medium 4.3
    CVE-2024-1405

    Linksys WRT54GL Web Management Interface wlaninfo.htm information disclosure

    A vulnerability was found in Linksys WRT54GL 4.30.18. It has been classified as problematic. This affects an unknown part of the file /wlaninfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has be…

    Linksys WRT54GL
  • Medium 4.8
    CVE-2023-45698

    HCL Sametime is impacted by clickjacking

    Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks.

    HCL Software HCL Sametime
  • Medium 4.4
    CVE-2023-28077

    Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary informa…

    Dell Dell BSAFE SSL-J
  • Medium 4.0
    CVE-2023-45696

    HCL Sametime is impacted by an autocomplete enabled vulnerability

    Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allows user entered data to be stored by the browser.

    HCL Software HCL Sametime