Total
5189 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-0038 | 1 Google | 1 Android | 2024-12-16 | N/A | 7.8 HIGH |
| In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | |||||
| CVE-2024-56003 | 2024-12-16 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer.This issue affects Caldera SMTP Mailer: from n/a through 1.0.1. | |||||
| CVE-2024-55999 | 2024-12-16 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through 2.0.6. | |||||
| CVE-2024-56009 | 2024-12-16 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in spreadr Spreadr Woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Spreadr Woocommerce: from n/a through 1.0.4. | |||||
| CVE-2024-56007 | 2024-12-16 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Ram Segev Leader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leader: from n/a through 2.6.1. | |||||
| CVE-2024-56004 | 2024-12-16 | N/A | 5.4 MEDIUM | ||
| Missing Authorization vulnerability in Alex W Fowler Easy Site Importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Site Importer: from n/a through 1.0.1. | |||||
| CVE-2024-56001 | 2024-12-16 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in Ksher Ksher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ksher: from n/a through 1.1.1. | |||||
| CVE-2024-55998 | 2024-12-16 | N/A | 5.4 MEDIUM | ||
| Missing Authorization vulnerability in dusthazard Popup Surveys & Polls for WordPress (Mare.io) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Surveys & Polls for WordPress (Mare.io): from n/a through 1.36. | |||||
| CVE-2024-55996 | 2024-12-16 | N/A | 6.1 MEDIUM | ||
| Missing Authorization vulnerability in Dreamfox Dreamfox Media Payment gateway per Product for Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dreamfox Media Payment gateway per Product for Woocommerce: from n/a through 3.5.6. | |||||
| CVE-2024-55994 | 2024-12-16 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in 搜狐畅言 畅言评论系统 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 畅言评论系统: from n/a through 2.0.5. | |||||
| CVE-2024-55993 | 2024-12-16 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in PickPlugins Job Board Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through 2.1.60. | |||||
| CVE-2024-55992 | 2024-12-16 | N/A | 5.4 MEDIUM | ||
| Missing Authorization vulnerability in Open Tools WooCommerce Basic Ordernumbers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Basic Ordernumbers: from n/a through 1.4.4. | |||||
| CVE-2024-54417 | 2024-12-16 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Pixelgrade PixProof allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PixProof: from n/a through 2.0.1. | |||||
| CVE-2024-54402 | 2024-12-16 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Jozoor Arabic Webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through 1.4.6. | |||||
| CVE-2024-54384 | 2024-12-16 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.8.3. | |||||
| CVE-2024-54379 | 2024-12-16 | N/A | 8.8 HIGH | ||
| Missing Authorization vulnerability in Blokhaus Minterpress allows Privilege Escalation.This issue affects Minterpress: from n/a through 1.0.5. | |||||
| CVE-2024-54378 | 2024-12-16 | N/A | 8.8 HIGH | ||
| Missing Authorization vulnerability in Quietly Quietly Insights allows Privilege Escalation.This issue affects Quietly Insights: from n/a through 1.2.2. | |||||
| CVE-2024-54369 | 2024-12-16 | N/A | 9.1 CRITICAL | ||
| Missing Authorization vulnerability in ThemeHunk Zita Site Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Zita Site Builder: from n/a through 1.0.2. | |||||
| CVE-2024-54359 | 2024-12-16 | N/A | 8.2 HIGH | ||
| Missing Authorization vulnerability in Saul Morales Pacheco Banner System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Banner System: from n/a through 1.0.0. | |||||
| CVE-2024-54354 | 2024-12-16 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in Beat Kueffer Termin-Kalender allows Stored XSS.This issue affects Termin-Kalender: from n/a through 0.99.47. | |||||