Total
7017 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-47585 | 2024-12-10 | N/A | 4.3 MEDIUM | ||
| SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks, resulting in privilege escalation. While authorizations for import and export are distinguished, a single authorization is applied for both, which may contribute to these risks. On successful exploitation, this can result in potential security concerns. However, it has no impact on the integrity and availability of the application and may have only a low impact on data confidentiality. | |||||
| CVE-2024-47581 | 2024-12-10 | N/A | 4.3 MEDIUM | ||
| SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted. | |||||
| CVE-2024-54218 | 2024-12-09 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in Thehp AIO Contact.This issue affects AIO Contact: from n/a through 2.8.1. | |||||
| CVE-2024-52391 | 2024-12-09 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3. | |||||
| CVE-2024-54254 | 2024-12-09 | N/A | 6.3 MEDIUM | ||
| Missing Authorization vulnerability in Kofi Mokome Message Filter for Contact Form 7.This issue affects Message Filter for Contact Form 7: from n/a through 1.6.3. | |||||
| CVE-2024-54251 | 2024-12-09 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in Prodigy Commerce Prodigy Commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prodigy Commerce: from n/a through 3.0.9. | |||||
| CVE-2024-54227 | 2024-12-09 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in theDotstore Minimum and Maximum Quantity for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimum and Maximum Quantity for WooCommerce: from n/a through 2.0.0. | |||||
| CVE-2024-53819 | 2024-12-09 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Sprout Invoices Client Invoicing by Sprout Invoices.This issue affects Client Invoicing by Sprout Invoices: from n/a through 20.8.0. | |||||
| CVE-2024-53798 | 2024-12-09 | N/A | 5.4 MEDIUM | ||
| Missing Authorization vulnerability in BAKKBONE Australia FloristPress.This issue affects FloristPress: from n/a through 7.3.0. | |||||
| CVE-2024-53785 | 2024-12-09 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Alexander Volkov Chatter.This issue affects Chatter: from n/a through 1.0.1. | |||||
| CVE-2023-51362 | 2024-12-09 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Premio All-in-one Floating Contact Form – My Sticky Elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All-in-one Floating Contact Form – My Sticky Elements: from n/a through 2.1.3. | |||||
| CVE-2023-51357 | 2024-12-09 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Conversios Conversios.io allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through 6.5.0. | |||||
| CVE-2023-51355 | 2024-12-09 | N/A | 8.2 HIGH | ||
| Missing Authorization vulnerability in MultiVendorX WC Marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Marketplace: from n/a through 4.0.23. | |||||
| CVE-2023-51353 | 2024-12-09 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through 1.10.19. | |||||
| CVE-2023-50899 | 2024-12-09 | N/A | 5.4 MEDIUM | ||
| Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2. | |||||
| CVE-2023-50887 | 2024-12-09 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in UserFeedback Team User Feedback allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Feedback: from n/a through 1.0.10. | |||||
| CVE-2023-50884 | 2024-12-09 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.1.5. | |||||
| CVE-2023-50877 | 2024-12-09 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in woobewoo Product Filter by WBW allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Filter by WBW: from n/a through 2.5.0. | |||||
| CVE-2023-50876 | 2024-12-09 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Molongui Molongui allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Molongui: from n/a through 4.7.3. | |||||
| CVE-2023-50375 | 2024-12-09 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Translate AI Multilingual Solutions Google Language Translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through 6.0.19. | |||||