Alerts
18 Dec 2024
NA - CVE-2024-55506 - An IDOR vulnerability in CodeAstro's...
An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php...
18 Dec 2024
NA - CVE-2024-56115 - A vulnerability in Amiro.CMS before 7.8.4...
A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It allows remote attackers to conduct a Cross-Site Scripting (XSS) attack.
18 Dec 2024
NA - CVE-2024-56116 - A Cross-Site Request Forgery vulnerability in...
A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account.
18 Dec 2024
NA - CVE-2024-56317 - In Matter (aka connectedhomeip or Project CHIP)...
In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then attempts to recreate them based on user input. If input...
18 Dec 2024
NA - CVE-2024-56318 - In raw\TCP.cpp in Matter (aka connectedhomeip...
In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero...
18 Dec 2024
NA - CVE-2024-56319 - In Matter (aka connectedhomeip or Project CHIP)...
In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can lead to a denial of service (resource exhaustion).
17 Dec 2024
CVE-2024-55956 - Cleo Multiple Products Unauthenticated File Upload sebezhetősége
17 Dec 2024
CVE-2024-50623 - Cleo Multiple Products Unrestricted File Upload sebezhetősége
17 Dec 2024
Medium - CVE-2024-11900 - The Portfolio – Filterable Masonry Portfolio...
The Portfolio – Filterable Masonry Portfolio Gallery for Professionals plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'portfolio-pro' shortcode in...