Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2025-01-08 CVE-2024-12112 The Easy Form Builder – WordPress plugin form builder: contact form, survey form, payment form, and custom form builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter of the 'add_form_Emsfb' AJAX action in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping and missing authorization checks.
network
low complexity
CWE-79
6.4
2025-01-08 CVE-2024-12521 The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slotti-embed-ga' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes.
network
low complexity
CWE-79
6.4
2025-01-08 CVE-2024-12713 The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the handle_export_form() function due to a missing capability check.
network
low complexity
CWE-862
5.3
2025-01-08 CVE-2024-54121 Unspecified vulnerability in Huawei Harmonyos 5.0.0
Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
network
low complexity
huawei
7.5
2025-01-08 CVE-2024-56448 Unspecified vulnerability in Huawei Emui and Harmonyos
Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability.
network
low complexity
huawei
7.5
2025-01-08 CVE-2024-56449 Unspecified vulnerability in Huawei Emui and Harmonyos
Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
network
low complexity
huawei
7.5
2025-01-08 CVE-2024-56450 Classic Buffer Overflow vulnerability in Huawei Emui and Harmonyos
Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability.
local
low complexity
huawei CWE-120
5.5
2025-01-08 CVE-2024-56451 Integer Overflow or Wraparound vulnerability in Huawei Harmonyos 5.0.0
Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
local
low complexity
huawei CWE-190
5.5
2025-01-08 CVE-2024-56452 Unspecified vulnerability in Huawei Harmonyos 5.0.0
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
local
low complexity
huawei
5.5
2025-01-08 CVE-2024-56453 Unspecified vulnerability in Huawei Harmonyos 5.0.0
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
local
low complexity
huawei
5.5