Archive
13 February 2025
Vulnerabilities first published on this day (UTC), newest first.
64 results · Clear filters · Feed
-
High 7.3CVE-2024-13346 Public exploit
Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly va…
-
High 7.8
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data an…
-
High 8.1
CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable w…
-
High 7.5
CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data…
-
High 7.5
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to s…
-
High 8.1
CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when mal…
-
High 8.1
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection
The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2.4 via deserialization of untrusted input 'view_more_posts' AJAX action. This makes it possi…
-
High 7.5
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this tabl…
-
High 7.5
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file,…
-
High 7.5
Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can …
-
High 7.7
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsula…
-
High 7.3CVE-2024-57378 Public exploit
Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creat…
-
High 7.5
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSe…
-
High 7.5
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 pa…
-
High 7.2
A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0, which allows remote attack…
-
High 7.2
A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, wh…
-
High 7.2
A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remot…
-
High 7.5
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIp…
-
High 7.2
A SQL Injection vulnerability was found in /admin/contactus.php in PHPGurukul Land Record System v1.0, which allows rem…
-
High 7.2
A SQL Injection vulnerability was found in /admin/manage-propertytype.php in PHPGurukul Land Record System v1.0, which …
-
High 7.2
A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, wh…
-
High 8.0
A session hijacking vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitte…
-
High 8.0
A critical information disclosure vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, V…
-
High 7.2
A critical remote code execution (RCE) vulnerability exists in the web-based management interface of GatesAir Maxiva UA…