Vulnerabilidades em unknown

4.777 resultados
Análise Vexday

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2024-1068HIGH404 Solution < 2.35.8 - Admin+ SQL InjectionEPSS 0.8%CVE-2023-2623—KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information DisclosureEPSS 0.8%CVE-2024-5450CRITICALBug Library < 2.1.1 - Unauthenticated RCEEPSS 0.8%CVE-2022-1951—Core Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-ScriptingEPSS 0.8%CVE-2023-2111MEDIUMHollerBox < 2.1.4 - Admin+ SQL InjectionEPSS 0.8%CVE-2021-25103—GTranslate < 2.9.7 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-4284—Post Timeline < 2.2.6 - Reflected XSSEPSS 0.8%CVE-2022-1788—Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRFEPSS 0.8%CVE-2021-24205—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box WidgetEPSS 0.8%CVE-2021-24147—Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2021-24455—Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2021-24201—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column ElementEPSS 0.7%CVE-2021-24206—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box WidgetEPSS 0.7%CVE-2021-24202—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading WidgetEPSS 0.7%CVE-2021-24203—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider WidgetEPSS 0.7%CVE-2021-24204—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion WidgetEPSS 0.7%CVE-2023-0376MEDIUMQubely < 1.8.5 - Contributor+ Stored XSSEPSS 0.7%CVE-2023-3365HIGHMultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment DeletionEPSS 0.7%CVE-2022-3912HIGHUser Registration < 2.2.4.1 - Subscriber+ Arbitrary File UploadEPSS 0.7%CVE-2023-0069MEDIUMWPaudio MP3 Player <= 4.0.2 - Contributor+ Stored XSSEPSS 0.7%