7.1

CVSS3.1

CVE-2024-38717 - WordPress Booking Ultra Pro Appointments Booking Calendar plugin <= 1.1.13 - Local File Inclusion v…

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Booking Ultra Pro allows PHP Local File Inclusion.This issue affects Booking Ultra Pro: from n/a through 1.1.13.

πŸ“… Published: July 12, 2024, 3:16 p.m. πŸ”„ Last Modified: Nov. 21, 2024, 9:26 a.m.

6.5

CVSS3.1

CVE-2024-38716 - WordPress Events Calendar for Google plugin <= 2.1.0 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Blue Plugins Events Calendar for Google allows PHP Local File Inclusion.This issue affects Events Calendar for Google: from n/a through 2.1.0.

πŸ“… Published: July 12, 2024, 3:14 p.m. πŸ”„ Last Modified: Nov. 21, 2024, 9:26 a.m.

6.4

CVSS3.1

CVE-2024-39916 - NFS server misconfiguration allows file access outside the exported directory

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. There is a security issue with the NFS configuration in /etc/exports generated by the installer that allows an attacker to modify files outside the export in the default installation. The exports have the no_subtree…

πŸ“… Published: July 12, 2024, 3 p.m. πŸ”„ Last Modified: Nov. 21, 2024, 9:28 a.m.

9.8

CVSS3.1

CVE-2024-39914 - FOG has a command injection in /fog/management/export.php?filename=

FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php. This vulnerability is fixed in 1.5.10.34.

πŸ“… Published: July 12, 2024, 2:46 p.m. πŸ”„ Last Modified: Sept. 29, 2025, 1:51 p.m.

6.5

CVSS3.1

CVE-2024-39909 - SQL Injection in the KubeClarity REST API

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems. A time/boolean SQL Injection is present in the following resource `/api/applicationResources` via the following parameter `packageID`. As it can be seen i…

πŸ“… Published: July 12, 2024, 2:34 p.m. πŸ”„ Last Modified: Nov. 21, 2024, 9:28 a.m.

8.6

CVSS3.1

CVE-2024-39903 - Local File Inclusion in Solara

Solara is a pure Python, React-style framework for scaling Jupyter and web apps. A Local File Inclusion (LFI) vulnerability was identified in widgetti/solara, in version <1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fra…

πŸ“… Published: July 12, 2024, 2:28 p.m. πŸ”„ Last Modified: April 10, 2025, 8:31 p.m.

6.5

CVSS3.1

CVE-2024-38715 - WordPress ExS Widgets plugin <= 0.3.1 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ExS ExS Widgets allows PHP Local File Inclusion.This issue affects ExS Widgets: from n/a through 0.3.1.

πŸ“… Published: July 12, 2024, 2:24 p.m. πŸ”„ Last Modified: July 12, 2025, 10:16 p.m.

5.3

CVSS3.1

CVE-2024-38709 - WordPress GD Rating System plugin <= 3.6 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6.

πŸ“… Published: July 12, 2024, 2:10 p.m. πŸ”„ Last Modified: July 12, 2025, 4:01 p.m.

8.8

CVSS3.1

CVE-2024-38706 - WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability

Path Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7.

πŸ“… Published: July 12, 2024, 2:08 p.m. πŸ”„ Last Modified: April 1, 2026, 4:17 p.m.

6.5

CVSS3.1

CVE-2024-38704 - WordPress Team Manager plugin <= 2.1.12 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DynamicWebLab WordPress Team Manager allows PHP Local File Inclusion.This issue affects WordPress Team Manager: from n/a through 2.1.12.

πŸ“… Published: July 12, 2024, 2:07 p.m. πŸ”„ Last Modified: Nov. 21, 2024, 9:26 a.m.
Total resulsts: 343968
Page 8639 of 34,397
Β« previous page Β» next page
Filters