NA - CVE-2024-7588 - The Gutenberg Blocks, Page Builder –...
The Gutenberg Blocks, Page Builder – ComboBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Accordion block in all versions up to, and including, 2.2.87...
Critical - CVE-2024-7731 - Dr.ID Access Control System from SECOM does not...
Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database...
Critical - CVE-2024-7732 - Dr.ID Access Control System from SECOM does not...
Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database...
High - CVE-2024-41858 - InCopy versions 18.5.2, 19.4 and earlier are...
InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user....
Medium - CVE-2024-41860 - Substance3D - Sampler versions 4.5 and earlier...
Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...
Medium - CVE-2024-41861 - Substance3D - Sampler versions 4.5 and earlier...
Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...
Medium - CVE-2024-41862 - Substance3D - Sampler versions 4.5 and earlier...
Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...
Medium - CVE-2024-41863 - Substance3D - Sampler versions 4.5 and earlier...
Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...
High - CVE-2024-41864 - Substance3D - Designer versions 13.1.2 and...
Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user....
High - CVE-2024-4389 - The Slider and Carousel slider by Depicter...
The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadFile function in all versions up to, and...