API - CVE CyberSecurity Database News (Page 111)

Dec 9, 2024 Windows API Exploit

CVE-2024-55580 - Remote Command Execution Vulnerability in Qlik Sense Enterprise for Windows — What You Need to Know

A critical vulnerability, CVE-2024-55580, has been discovered in Qlik Sense Enterprise for Windows. It affects versions before the November 2024 Initial Release (IR) as well

Dec 7, 2024 XSS WordPress API

CVE-2024-11380 - Stored XSS in WordPress Mini Program API Plugin (qvideo Shortcode) All Versions ≤ 1.4.5 – Explained & Exploited

WordPress is the world’s favorite CMS, but sometimes its power comes with risk. On February 26, 2024, a security flaw was reported in the

Dec 6, 2024 API Exploit

CVE-2024-42494 - Ruijie Reyee OS Flaw Exposes All Linked Cloud Accounts—How Attackers Exploit It

In early 2024, security researchers uncovered a major vulnerability—CVE-2024-42494—impacting Ruijie Reyee OS, the operating system behind Ruijie’s popular smart routers and gateways.

Dec 6, 2024 API SQL Oracle PHP

CVE-2024-53908 - Oracle SQL Injection in Django’s HasKey Lookup - What You Need to Know

Recently, a critical security issue was unearthed in the Django framework, specifically tied to the HasKey JSON field lookup when interacting with Oracle databases. This

Dec 5, 2024 API

CVE-2024-52798 - How A Path-to-Regexp Bug Can Hurt Your App’s Performance (And How To Fix It)

CVE-2024-52798 is a newly disclosed vulnerability affecting versions of the popular JavaScript library path-to-regexp—commonly used in Express.js and other Node.js web frameworks.