CVE-2021-24583

The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any user with the editposts capability contributor+ to delete arbitrary timeslot from any events. Furthermore, no CSRF check is in place as well, allowing such...

CVE-2025-24583

CVE-2025-24583 affects the WordPress plugin “12 Step Meeting List” up to version 3.16.5. The vulnerability is described as a Missing Authorization issue that allows exploitation due to incorrectly configured access control security levels. Documented impact: baseline CVSSv3.1 score around 6.5 (Me...

CVE-2025-24583 WordPress 12 Step Meeting List plugin <= 3.16.5 - Settings Change vulnerability

Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through = 3.16.5...

CVE-2024-24583

creationtimestamp| type| source ---|---|--- 2025-02-11 23:11:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3940...

CVE-2024-24583

Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.This vulnerabilitty concerns thereadMSH function while processin...

CVE-2024-24583

Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.This vulnerabilitty concerns thereadMSH function while processin...

CVE-2024-24583

CVE-2024-24583 affects libigl v2.5.0. The vulnerability is an out-of-bounds read in readMSH when processing MshLoader::ELEMENT_TRI, triggered by a specially crafted .msh file. Multiple connected sources (NVD/NVV publications and related CVE aggregations) report this exact issue and its associatio...

CVE-2024-24583

Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.This vulnerabilitty concerns thereadMSH function while processin...

CVE-2024-24583

Removed by vendor...

CVE-2023-24583

Two OS command injection vulnerabilities exist in the urvpnclient cmdnameaction functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This OS command injectio...

CVE-2023-24583

Summary (CVE-2023-24583) : Cisco Talos details two OS command injection flaws in Milesight UR32L v32.3.0.5 related to the urvpn_client’s command handling (execute_urvpn_command and cmd_name_action). An attacker can trigger arbitrary command execution by sending crafted JSON via UDP (and via TCP i...

CVE-2023-24583

Two OS command injection vulnerabilities exist in the urvpnclient cmdnameaction functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This OS command injectio...

Milesight UR32L urvpn_client cmd_name_action OS command injection vulnerabilities

Talos Vulnerability Report TALOS-2023-1710 Milesight UR32L urvpnclient cmdnameaction OS command injection vulnerabilities July 6, 2023 CVE Number CVE-2023-24583,CVE-2023-24582 SUMMARY Two OS command injection vulnerabilities exist in the urvpnclient cmdnameaction functionality of Milesight UR32L...

CVE-2021-24583 Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Deletion

The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any user with the editposts capability contributor+ to delete arbitrary timeslot from any events. Furthermore, no CSRF check is in place as well, allowing such...

CVE-2021-24583

The Timetable and Event Schedule WordPress plugin by MotoPress (versions prior to 2.4.2) has a vulnerability where deleting a timeslot lacks proper access control and CSRF protection. Any user with the edit_posts capability (contributor+) can delete arbitrary timeslots from any event. The issue i...

alcali (>=2018.3.1, <=2019.2.3), ambition-edc (>=0.3.62, <=0.3.72) +79 more potentially affected by CVE-2020-24583 via django (>=2.2.0, <=2.2.15)

django PYPI version =2.2.0, =2018.3.1, =0.3.62, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =1.0.1, =0.0.30, =0.0.1, =0.0.1, =2.0.0, =1.1.34, =1.1.45 - django-country-filter 0.0.1 and more Source cves: CVE-2020-24583 Source advisory: OSV:GHSA-M6GJ-H9GM-GW44...

alcali (>=2018.3.1, <=2019.2.3), ambition-edc (>=0.3.62, <=0.3.72) +79 more potentially affected by CVE-2020-24583 via django (>=2.2.0, <=2.2.15)

django PYPI version =2.2.0, =2018.3.1, =0.3.62, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =1.0.1, =0.0.30, =0.0.1, =0.0.1, =2.0.0, =1.1.34, =1.1.45 - django-country-filter 0.0.1 and more Source cves: CVE-2020-24583 Source advisory: GHSA-M6GJ-H9GM-GW44...

ariadne-jwt (>=0.1.0, <=0.1.3), balder (0.1.24) +30 more potentially affected by CVE-2020-24583 via django (>=3.1.0a1, <=3.1.0)

django PYPI version =3.1.0a1, =0.1.0, =20.13.1, =0.1.0, =0.10.0, =0.9.0, =0.4.0, =0.12.0, =0.5.0, =0.7.0, =0.8.0, =0.13.2 and more Source cves: CVE-2020-24583 Source advisory: OSV:GHSA-M6GJ-H9GM-GW44...

alcali (>=2018.3.4, <=3000.1.0), archivebox (>=0.4.6, <=0.4.21) +71 more potentially affected by CVE-2020-24583 via django (>=3.0.0rc1, <=3.0.9)

django PYPI version =3.0.0rc1, =2018.3.4, =0.4.6, =0.1.3, =0.1.3, =0.3.0, =0.0.1, =0.1.1, =0.0.1, =1.2.0, =1.2.3 - deustest2022 1.0.0 - django-account-rcg-chandu 0.1.0 - django-account-rcgchandu 0.2.0 - django-acsecure 0.1.3 - django-admin-custom-filters 0.1.0 and more Source cves: CVE-2020-24583...

alcali (>=2018.3.4, <=3000.1.0), archivebox (>=0.4.6, <=0.4.21) +71 more potentially affected by CVE-2020-24583 via django (>=3.0.0rc1, <=3.0.9)

django PYPI version =3.0.0rc1, =2018.3.4, =0.4.6, =0.1.3, =0.1.3, =0.3.0, =0.0.1, =0.1.1, =0.0.1, =1.2.0, =1.2.3 - deustest2022 1.0.0 - django-account-rcg-chandu 0.1.0 - django-account-rcgchandu 0.2.0 - django-acsecure 0.1.3 - django-admin-custom-filters 0.1.0 and more Source cves: CVE-2020-24583...