65 matches found
CVE-2025-13734
IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions...
CVE-2025-13734
IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions...
CVE-2025-13734
IBM Engineering Requirements Management DOORS Next (versions 7.1 and 7.2) contains an access-control flaw (CWE-862) that could allow an authenticated user to view and edit data beyond their authorized permissions. The issue arises from insufficient authorization enforcement and has a CVSS v3.1 ba...
MiracleLinux 7 : sqlite-3.7.17-8.el7.1 (AXSA:2020-047:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-047:01 advisory. Fixes for CVE-2019-13734 CVE-2019-13734 Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit...
TencentOS Server 3: sqlite (TSSA-2022:0111)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0111 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Alibaba Cloud Linux 3 : 0111: sqlite (ALINUX3-SA-2022:0111)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0111 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-13734: Out of bounds write in...
Linux Distros Unpatched Vulnerability : CVE-2017-13734
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access in the ncsafestrcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack. CVE-2017-13734...
CVE-2024-13734
The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-13734
The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-13734
creationtimestamp| type| source ---|---|--- 2025-02-27 09:27:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5661 2025-02-27 12:52:29+00:00| seen| https://t.me/cvedetector/19032 2025-02-27 13:48:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj5zsonubx2y...
CVE-2024-13734
CVE-2024-13734 affects Card Elements for Elementor (WordPress) up to version 1.2.6. It is a stored XSS via the Profile Card widget, exploitable by authenticated users with contributor+ privileges due to insufficient input sanitization and output escaping. Impact: arbitrary script execution on pag...
CVE-2024-13734 Card Elements for Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget
The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-13734 Card Elements for Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget
The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2019-13734
creationtimestamp| type| source ---|---|--- 2024-03-09 15:46:52+00:00| seen| https://t.me/ctinow/203979...
Oracle Linux 8 : sqlite (ELSA-2020-0273)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0273 advisory. 3.26.0-4 - Fixed CVE-2019-13734 1786508 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...
Adobe Bridge out-of-bounds write vulnerability (CNVD-2023-13734)
Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which can be exploited to execute arbitrary code in the context of the current user...
SUSE CVE-2019-13734
Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Mageia: Security Advisory (MGASA-2020-0078)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...