Autore: Angelo Barbosa

CVE-2024-2783 | GamiPress Plugin up to 6.9.0 on WordPress Shortcode cross site scripting

A vulnerability has been found in GamiPress Plugin up to 6.9.0 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-2783. The attack can be launched remotely. There is no exploit...

Per saperne di più

CVE-2024-23451 | Elasticsearch up to 8.12.x Remote Cluster Security authorization

A vulnerability, which was classified as problematic, has been found in Elasticsearch up to 8.12.x. This issue affects some unknown processing of the component Remote Cluster Security. The manipulation leads to incorrect authorization. The identification of this vulnerability is CVE-2024-23451. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-20308 | Cisco IOS/IOS XE IKEv1 Fragmentation denial of service (cisco-sa-ikev1-NO2ccFWz)

A vulnerability classified as critical has been found in Cisco IOS and IOS XE. This affects an unknown part of the component IKEv1 Fragmentation Handler. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2024-20308. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più