13 matches found
CVE-2025-13526
creationtimestamp| type| source ---|---|--- 2025-11-22 13:24:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m67vgsrlf52j 2025-11-23 06:03:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/115597496731214135 2025-11-23 06:03:42+00:00| seen|...
CVE-2019-13526
Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code...
CVE-2024-13526
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the exportsubmittionattendees function in all versions up to, and including, 4.0.7.3. This makes it possible for authenticated attackers,...
CVE-2024-13526
creationtimestamp| type| source ---|---|--- 2025-03-07 02:35:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6786 2025-03-07 04:03:54+00:00| seen| https://t.me/cvedetector/19772 2025-03-07 05:59:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrddpyzeb2h 2025-03-08...
CVE-2024-13526
CVE-2024-13526 affects the EventPrime – Events Calendar, Bookings and Tickets WordPress plugin. The root cause is missing capability checks in the export_submittion_attendees function across all versions up to 4.0.7.3, enabling authenticated users with Subscriber-level access and higher to downlo...
CVE-2024-13526 EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the exportsubmittionattendees function in all versions up to, and including, 4.0.7.3. This makes it possible for authenticated attackers,...
CVE-2020-13526
creationtimestamp| type| source ---|---|--- 2020-12-11 02:34:30+00:00| seen| https://t.me/cibsecurity/19636 2020-12-11 02:37:34+00:00| seen| https://t.me/cibsecurity/19656 2020-12-11 03:25:24+00:00| seen| https://t.me/cibsecurity/19676 2020-12-11 04:25:18+00:00| seen| https://t.me/cibsecurity/196...
CVE-2020-13526
SQL injection vulnerability exists in the handling of sort parameters in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. The reportTablesAjax and clientSetupAjax pages are vulnerable to SQL injection in the sort parameter.An attacker can make an authenticated HTT...
CVE-2020-13526
ProcessMaker 3.4.11 is vulnerable to SQL injection via the sort parameter in the reportTables_Ajax and clientSetupAjax pages. The root cause is improper handling/validation of the sort input, enabling authenticated attackers to inject SQL through these endpoints. Reported issues affect authentica...
CVE-2019-13526
CVE-2019-13526 affects Datalogic AV7000 Linear Barcode Scanner (all versions prior to 4.6.0.0). The vulnerability is an authentication bypass (CWE-288) that could allow a remote attacker to execute arbitrary code. Public documents confirm remote exploitation with CVSS v3 base score 8.8 (high impa...
Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2018-13526)
Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...
CVE-2018-13526
CVE-2018-13526 describes an integer overflow in the mintToken function of WangWangToken’s smart contract. The overflow allows the contract owner to set any user’s balance to an arbitrary value. Documented details come from multiple sources (NVD/CNVD/others) without confirmation of exploitation st...
Fedora Update for audit FEDORA-2015-13526
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...