159 matches found
CVE-2024-1124
CVE-2024-1124 concerns EventPrime – Events Calendar, Bookings and Tickets for WordPress. Multiple connected sources confirm the vulnerability exists in all versions up to and including 3.4.1, arising from a missing capability check in ep_send_attendees_email(), which permits authenticated attacke...
WordPress WP EasyCart Plugin < 5.4.3 is vulnerable to Local File Inclusion
Software WP EasyCart Type Plugin Vulnerable versions 5.4.3 Fixed in 5.4.3 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-1124 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID e0487c7e1bcd Credits Shreya Pohekar Required privilege Administrator...
CVE-2023-1124
creationtimestamp| type| source ---|---|--- 2023-04-03 18:25:01+00:00| seen| https://t.me/cibsecurity/61330 2023-04-03 19:36:32+00:00| seen| Telegram/pcBUMTwLt7ihpWCbGzD5pHQiN-7UlhllHZWrtmxclSA 2025-02-14 21:09:17+00:00| seen| Telegram/VDjyOVNUMkgwbKMsMCTXWnETEP90OZW2fOik2rfr21iWYgW...
CVE-2023-1124 Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI
The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks...
CVE-2023-1124
CVE-2023-1124 affects the Shopping Cart & eCommerce Store WordPress plugin (versions before 5.4.3). The vulnerability arises from not validating HTTP requests, allowing authenticated administrators to perform Local File Inclusion (LFI) attacks. Impact is high for confidentiality, integrity, and a...
Ubuntu: Security Advisory (USN-3658-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-1124
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...
CVE-2022-1124
CVE-2022-1124 is an improper authorization vulnerability in GitLab CE/EE. It affects all versions prior to 14.8.6, all 14.9.0–14.9.3, and 14.10.0, allowing Guest project members to access the trace log of jobs when tracing is enabled. The initial description and connected records confirm the root...
CVE-2022-1124
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...
GitLab < 14.8.6 / 14.9.x < 14.9.4 / 14.10.x < 14.10.1 Multiple Vulnerabilities
According to its self-reported version, the instance of GitLab running on the remote web server is prior to 14.8.6, 14.9.x prior to 14.9.4, or 14.10.x prior to 14.10.1. It is, therefore, affected by the following vulnerabilities: - An improper authorization issue exists in GitLab CE/EE that allow...
SUSE: Security Advisory (SUSE-SU-2019:2730-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:2042-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:2451-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:1836-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1124
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1134, CVE-2020-1144, CVE-2020-1184,...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1134, CVE-2020-1144,...
CVE-2020-1124
CVE-2020-1124 is a Windows vulnerability affecting the Windows State Repository Service, where an elevation of privilege occurs due to improper handling of objects in memory. The issue can allow a local attacker to gain higher privileges, with CVSS-3.1 indicating a HIGH base score (local exploit,...