Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2024-54354 |
Description: Missing Authorization vulnerability in Beat Kueffer Termin-Kalender allows Stored XSS.This issue affects Termin-Kalender: from n/a through 0.99.47.
CVSS: MEDIUM (6.5) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|
|
CVE-2024-54353 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in WPGear Hack-Info allows Stored XSS.This issue affects Hack-Info: from n/a through 3.17.
CVSS: HIGH (7.1) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|
|
CVE-2024-54352 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Sabri Taieb Sogrid allows Privilege Escalation.This issue affects Sogrid: from n/a through 1.5.2.
CVSS: HIGH (8.8) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|
|
CVE-2024-54348 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YayCommerce Brand allows Stored XSS.This issue affects Brand: from n/a through 1.1.6.
CVSS: MEDIUM (6.5) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|
|
CVE-2024-54332 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in WPFactory WP Currency Exchange Rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through 1.2.0.
CVSS: HIGH (7.1) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|
|
CVE-2024-54331 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Micha I Plant A Tree allows Stored XSS.This issue affects I Plant A Tree: from n/a through 1.7.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|
|
CVE-2024-54285 |
Description: Unrestricted Upload of File with Dangerous Type vulnerability in SeedProd LLC SeedProd Pro allows Upload a Web Shell to a Web Server.This issue affects SeedProd Pro: from n/a through 6.18.10.
CVSS: CRITICAL (9.1) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|
|
CVE-2024-54284 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SeedProd LLC SeedProd Pro allows SQL Injection.This issue affects SeedProd Pro: from n/a through 6.18.10.
CVSS: HIGH (7.6) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|
|
CVE-2024-54283 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SeedProd LLC SeedProd Pro allows SQL Injection.This issue affects SeedProd Pro: from n/a through 6.18.10.
CVSS: HIGH (7.6) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|
|
CVE-2024-54280 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design WPBookit allows SQL Injection.This issue affects WPBookit: from n/a through 1.6.0.
CVSS: CRITICAL (9.3) EPSS Score: 0.04%
December 17th, 2024 (4 months ago)
|