Medium - CVE-2024-10853 - The Buy one click WooCommerce plugin for...
The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the removeorder AJAX action in all versions up to, and...
Medium - CVE-2024-10854 - The Buy one click WooCommerce plugin for...
The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the buy_one_click_import_options AJAX action in all...
Medium - CVE-2024-10887 - The NiceJob plugin for WordPress is vulnerable...
The NiceJob plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes (nicejob-lead, nicejob-review, nicejob-engage, nicejob-badge,...
NA - CVE-2024-32839 - SQL injection in Ivanti Endpoint Manager before...
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote...
NA - CVE-2024-32841 - SQL injection in Ivanti Endpoint Manager before...
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote...
NA - CVE-2024-32844 - SQL injection in Ivanti Endpoint Manager before...
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote...
NA - CVE-2024-32847 - SQL injection in Ivanti Endpoint Manager before...
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote...
NA - CVE-2024-34780 - SQL injection in Ivanti Endpoint Manager before...
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote...
NA - CVE-2024-34781 - SQL injection in Ivanti Endpoint Manager before...
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote...