Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2024-12-09 CVE-2023-49831 Missing Authorization vulnerability in Metagauss Registrationmagic
Missing Authorization vulnerability in Metagauss User Registration Forms RegistrationMagic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RegistrationMagic: from n/a through 5.2.3.0.
network
low complexity
metagauss CWE-862
7.5
2024-12-09 CVE-2023-49856 Missing Authorization vulnerability in Rednao Smart Forms
Missing Authorization vulnerability in RedNao Smart Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through 2.6.84.
network
low complexity
rednao CWE-862
8.8
2024-12-09 CVE-2023-51359 Missing Authorization vulnerability in Wpdeveloper Essential Blocks
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0.
network
low complexity
wpdeveloper CWE-862
8.8
2024-12-09 CVE-2023-51360 Missing Authorization vulnerability in Wpdeveloper Essential Blocks
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0.
network
low complexity
wpdeveloper CWE-862
8.8
2024-12-09 CVE-2024-53816 Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons
Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.5.
network
low complexity
themeum CWE-862
8.8
2024-12-09 CVE-2024-12358 OS Command Injection vulnerability in Datax-Web Project Datax-Web 2.1.1
A vulnerability was found in WeiYe-Jing datax-web 2.1.1.
network
low complexity
datax-web-project CWE-78
8.8
2024-12-09 CVE-2024-12360 SQL Injection vulnerability in Online Class and Exam Scheduling System Project Online Class and Exam Scheduling System 1.0
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0.
8.8
2024-12-09 CVE-2024-12353 Unspecified vulnerability in Razormist Phone Contact Manager System 1.0
A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0.
local
low complexity
razormist
7.8
2024-12-09 CVE-2024-12354 Out-of-bounds Write vulnerability in Razormist Phone Contact Manager System 1.0
A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0.
local
low complexity
razormist CWE-787
7.8
2024-12-09 CVE-2024-12355 Unspecified vulnerability in Razormist Phone Contact Manager System 1.0
A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic.
local
low complexity
razormist
7.8