Riasztások
3 Feb 2025
High - CVE-2024-12859 - The BoomBox Theme Extensions plugin for...
The BoomBox Theme Extensions plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8.0 via the 'boombox_listing' shortcode 'type'...
3 Feb 2025
NA - CVE-2024-56921 - An issue was discovered in Open5gs v2.7.2....
An issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of gmm_state_exception() function upon...
3 Feb 2025
NA - CVE-2024-56946 - Denial of service in DNS-over-QUIC in...
Denial of service in DNS-over-QUIC in Technitium DNS Server
3 Feb 2025
NA - CVE-2024-57097 - ClassCMS 4.8 is vulnerable to Cross Site...
ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.
3 Feb 2025
NA - CVE-2024-57098 - Moss v0.1.3 version has an SQL injection...
Moss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully designed payloads into the order parameter.
3 Feb 2025
NA - CVE-2024-57099 - ClassCMS v4.8 has a code execution...
ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to...
3 Feb 2025
NA - CVE-2024-57498 - Cross Site Scripting vulnerability in sayski...
Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function.
3 Feb 2025
NA - CVE-2024-57669 - Directory Traversal vulnerability in Zrlog...
Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive information via the BackupController.java file.