| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-2516 | MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php sql injection | MAGESH-K21 | Online-College-Event-Hall-Reservation-System | Medium | 6.3 | 2024-03-16 11:31:05 | Deep Dive |
| CVE-2024-2515 | MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php cross site scripting | MAGESH-K21 | Online-College-Event-Hall-Reservation-System | Low | 3.5 | 2024-03-16 09:00:06 | Deep Dive |
| CVE-2024-2514 | MAGESH-K21 Online-College-Event-Hall-Reservation-System login.php sql injection | MAGESH-K21 | Online-College-Event-Hall-Reservation-System | High | 7.3 | 2024-03-15 22:31:05 | Deep Dive |
| CVE-2024-0976 | WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin | wpeventmanager | WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce | Medium | 6.1 | 2024-03-13 15:26:48 | Deep Dive |
| CVE-2024-1316 | Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access | Unknown | Event Tickets and Registration | - | - | 2024-03-04 21:00:10 | Deep Dive |
| CVE-2024-0692 | SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability | SolarWinds | Security Event Manager | High | 8.8 | 2024-03-01 08:55:36 | Deep Dive |
| CVE-2024-1053 | Event Tickets and Registration <= 5.8.1 - Missing Authorization | stellarwp | Event Tickets and Registration | Medium | 4.3 | 2024-02-22 05:32:49 | Deep Dive |
| CVE-2024-25634 | IDOR make user can read e-mail log sent by other events | alfio-event | alf.io | High | 7.2 | 2024-02-19 19:53:53 | Deep Dive |
| CVE-2024-25635 | IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS | alfio-event | alf.io | High | 8.8 | 2024-02-19 19:48:10 | Deep Dive |
| CVE-2024-25627 | Cross-Site Scripting (XSS) via File Upload in Alf.io | alfio-event | alf.io | Low | 3.5 | 2024-02-16 20:27:58 | Deep Dive |
| CVE-2024-25628 | Insufficient Session Expiration in alf.io | alfio-event | alf.io | High | 7.6 | 2024-02-16 20:23:45 | Deep Dive |
| CVE-2024-24796 | WordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection | MagePeople Team | Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin | High | 8.2 | 2024-02-12 07:47:08 | Deep Dive |
| CVE-2024-1122 | Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export | arraytics | Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) | Medium | 5.3 | 2024-02-09 04:31:54 | Deep Dive |
| CVE-2023-52118 | WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) | WP Event Manager | WP User Profile Avatar | Medium | 6.5 | 2024-02-01 10:08:07 | Deep Dive |
| CVE-2023-38541 | Intel NUC 安全漏洞 | - | Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers | Medium | 6.7 | 2024-01-19 20:03:14 | Deep Dive |
| CVE-2023-51354 | WordPress Webba Booking Plugin <= 4.5.33 is vulnerable to Cross Site Request Forgery (CSRF) | WebbaPlugins | Appointment & Event Booking Calendar Plugin – Webba Booking | Medium | 4.3 | 2023-12-29 12:23:41 | Deep Dive |
| CVE-2023-47525 | WordPress Event Monster plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability | A WP Life | Event Management Tickets Booking | Medium | 5.9 | 2023-12-21 14:25:40 | Deep Dive |
| CVE-2023-35867 | 部分Bosch产品 安全漏洞 | Bosch | BVMS | Medium | 5.9 | 2023-12-18 12:59:49 | Deep Dive |
| CVE-2023-49181 | WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS) | WP Event Manager | WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce | Medium | 5.9 | 2023-12-15 14:49:52 | Deep Dive |
| CVE-2023-49179 | WordPress Event post Plugin <= 5.8.6 is vulnerable to Cross Site Scripting (XSS) | N.O.U.S. Open Useful and Simple | Event post | Medium | 6.5 | 2023-12-15 14:45:18 | Deep Dive |