Archive
5 April 2024
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
High 8.8CVE-2024-3217 Public exploit
WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up to, and including, 1.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient pre…
-
High 8.8CVE-2023-52235 Public exploit
SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow…
-
High 7.8CVE-2024-29863 Public exploit
A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 S…
-
High 7.5CVE-2024-22363 Public exploit
SheetJS Regular Expression Denial of Service (ReDoS)
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).