diff --git a/cache/Nsfocus.dat b/cache/Nsfocus.dat index 2be7b19400e..2fe895d121a 100644 --- a/cache/Nsfocus.dat +++ b/cache/Nsfocus.dat @@ -169,3 +169,18 @@ ec369a198911247a6fe112e234b7b303 6a211d26ee8c64c4e16a5d0cec726531 ccb02e0b6c24d6fb4542ba032332328d 0cec8b60a4189f61996411b5d309bbc1 +12e92aa591dbfeff2d6a0d0573d672c8 +8ab8e038acb11b11b2dfe4fd404d651e +31012d5151327cf067b69c0db1245b76 +457d2da43db342e4f83ce780b772e380 +5a34d860c8238a8b922cd7bbef86637a +126395bd68a0035ffa78f7757fad9b14 +ea6ac307c2146de5e8307bbf1abf3a9c +a600cad0ef5c5e6dee70e7d608e3adcc +5f45589081c34facc24cb7353c00126a +c57350ceb56bd244910ea6629510928f +c7bfc65346b9059f1ae39162489021bb +f2dc767b71c4b7814e24521f35f6ee12 +5ca029f3bdadc48620e10b5f631a7667 +8f241718aebae237dce079a55026c87f +64ce1bc79df667863642eb678b24ec57 diff --git a/data/cves.db b/data/cves.db index 7e48bd7ca07..fb648c02f4a 100644 Binary files a/data/cves.db and b/data/cves.db differ diff --git a/docs/index.html b/docs/index.html index f8d91ad8b0b..3b7bf3b3a84 100644 --- a/docs/index.html +++ b/docs/index.html @@ -1,4 +1,4 @@ - + @@ -366,7 +366,7 @@

眈眈探求 | + 2024-11-10 13:15:03 The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 详情 @@ -374,7 +374,7 @@

眈眈探求 | + 2024-11-10 13:15:03 The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.15.30. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. 详情 @@ -382,7 +382,7 @@

眈眈探求 | + 2024-11-10 12:15:19 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPZA AMP Img Shortcode allows Stored XSS.This issue affects AMP Img Shortcode: from n/a through 1.0.1. 详情 @@ -390,7 +390,7 @@

眈眈探求 | + 2024-11-10 10:15:05 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Luca Paggetti 3D Presentation allows Stored XSS.This issue affects 3D Presentation: from n/a through 1.0. 详情 @@ -398,7 +398,7 @@

眈眈探求 | + 2024-11-10 10:15:04 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Camunda Services GmbH bpmn.Io allows Stored XSS.This issue affects bpmn.Io: from n/a through 1.0. 详情 @@ -406,7 +406,7 @@

眈眈探求 | + 2024-11-10 10:15:03 A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. This vulnerability affects unknown code of the file /music/ajax.php?action=signup. The manipulation of the argument pp leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 详情 @@ -414,7 +414,7 @@

眈眈探求 | + 2024-11-10 09:15:04 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Anas Edreesi Marquee Elementor with Posts allows DOM-Based XSS.This issue affects Marquee Elementor with Posts: from n/a through 1.2.0. 详情 @@ -422,7 +422,7 @@

眈眈探求 | + 2024-11-10 09:15:03 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KentoThemes Kento Ads Rotator allows Stored XSS.This issue affects Kento Ads Rotator: from n/a through 1.3. 详情 @@ -430,7 +430,7 @@

眈眈探求 | + 2024-11-10 09:15:03 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Stored XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.6. 详情 @@ -438,7 +438,7 @@

眈眈探求 | + 2024-11-10 09:15:03 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CleverSoft Clever Addons for Elementor allows Stored XSS.This issue affects Clever Addons for Elementor: from n/a through 2.2.1. 详情 @@ -1979,6 +1979,22 @@

眈眈探求 | TITLE URL + + 12e92aa591dbfeff2d6a0d0573d672c8 + CVE-2024-6282 + 2024-11-12 03:23:48 + WordPress Master Addons Plugin跨站脚本漏洞 + 详情 + + + + 8ab8e038acb11b11b2dfe4fd404d651e + CVE-2024-7770 + 2024-11-12 03:23:48 + WordPress Bit File Manager Plugin任意文件上传漏洞 + 详情 + + fb4a5bf4f9232b67f02f9b48d01cae66 CVE-2024-44087 @@ -2203,22 +2219,6 @@

眈眈探求 | 详情 - - 84f6455bb4a352b0c3231e5a3e515d52 - CVE-2024-10491 - 2024-11-11 03:26:23 - Express.js任意资源注入漏洞 - 详情 - - - - 76fa976c8b2146988f7b4a3eb3c4c8b8 - CVE-2024-50459 - 2024-11-11 03:26:23 - WordPress plugin Stripe Donation and Payment缺少授权漏洞 - 详情 - -