Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-10 | CVE-2024-11046 | Command Injection vulnerability in Dlink Di-8003 Firmware 16.07.16A1 A vulnerability was found in D-Link DI-8003 16.07.16A1. | 9.8 |
| 2024-11-09 | CVE-2024-36250 | Authentication Bypass by Capture-replay vulnerability in Mattermost Server Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds | 4.8 |
| 2024-11-09 | CVE-2024-42000 | Incorrect Authorization vulnerability in Mattermost Server Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 and 10.0.x <= 10.0.0 fail to properly authorize the requests to /api/v4/channels which allows a User or System Manager, with "Read Groups" permission but with no access for channels to retrieve details about private channels that they were not a member of by sending a request to /api/v4/channels. | 4.3 |
| 2024-11-09 | CVE-2024-52032 | Unspecified vulnerability in Mattermost Server Mattermost versions 10.0.x <= 10.0.0 and 9.11.x <= 9.11.2 fail to properly query ElasticSearch when searching for the channel name in channel switcher which allows an attacker to get private channels names of channels that they are not a member of, when Elasticsearch v8 was enabled. | 4.3 |
| 2024-11-09 | CVE-2024-51585 | Cross-site Scripting vulnerability in Nicheaddons Sales Page Addon Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NicheAddons Sales Page Addon – Elementor & Beaver Builder allows Stored XSS.This issue affects Sales Page Addon – Elementor & Beaver Builder: from n/a through 1.4.2. | 5.4 |
| 2024-11-09 | CVE-2024-51586 | Cross-site Scripting vulnerability in Camilluskillus Elementary Addons Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BRAFT Elementary Addons allows Stored XSS.This issue affects Elementary Addons: from n/a through 2.0.4. | 5.4 |
| 2024-11-09 | CVE-2024-51587 | Cross-site Scripting vulnerability in Softfirm Definitive Addons for Elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Softfirm Definitive Addons for Elementor allows Stored XSS.This issue affects Definitive Addons for Elementor: from n/a through 1.5.16. | 5.4 |
| 2024-11-09 | CVE-2024-51588 | Cross-site Scripting vulnerability in Themehat Super Addons for Elementor 1.0 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themehat Super Addons for Elementor allows DOM-Based XSS.This issue affects Super Addons for Elementor: from n/a through 1.0. | 5.4 |
| 2024-11-09 | CVE-2024-51589 | Cross-site Scripting vulnerability in Wpcirqle Bigmart Elements Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpcirqle Bigmart Elements allows DOM-Based XSS.This issue affects Bigmart Elements: from n/a through 1.0.3. | 5.4 |
| 2024-11-09 | CVE-2024-51590 | Cross-site Scripting vulnerability in Hoosoft HOO Addons for Elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hoosoft Hoo Addons for Elementor allows DOM-Based XSS.This issue affects Hoo Addons for Elementor: from n/a through 1.0.6. | 5.4 |