CVEs published by AppCheck Ltd.

CVEs published by AppCheck Ltd. (CVE Numbering Authority). 7 tracked.

CVE-2024-29833 MEDIUM 5.4 UPGRADE The image upload component allows SVG files and the regular expression used to remove script tags can be bypas
CVE-2024-29832 MEDIUM 6.1 UPGRADE The current_url parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflect
CVE-2024-29810 MEDIUM 5.4 UPGRADE The thumb_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflec
CVE-2024-29809 MEDIUM 5.4 UPGRADE The image_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflec
CVE-2024-29808 MEDIUM 5.4 UPGRADE The image_id parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflect
CVE-2023-41138 HIGH 7.5 DOWNGRADE The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated
CVE-2023-41137 HIGH 8.0 DOWNGRADE DOWNGRADE Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reve