156 matches found
CVE-2024-2574
CVE-2024-2574 affects SourceCodester Employee Task Management System 1.0. The vulnerability exists in the /edit-task.php endpoint where manipulating the task_id parameter leads to an authorization bypass. Exploitation is remote and publicly disclosed per the provided documents. Multiple sources c...
CVE-2024-2574 SourceCodester Employee Task Management System edit-task.php authorization
A vulnerability classified as critical was found in SourceCodester Employee Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit-task.php. The manipulation of the argument taskid leads to authorization bypass. The attack can be launched remotely...
CVE-2024-2574
creationtimestamp| type| source ---|---|--- 2024-03-17 15:51:34+00:00| seen| https://t.me/ctinow/209971 2024-03-18 03:26:45+00:00| seen| https://t.me/ctinow/210134 2024-03-18 03:26:53+00:00| seen| https://t.me/ctinow/210139...
BELL-CVE-2020-2574 CVE-2020-2574 does not affect BellSoft software
Bulletin has no description...
Advantech EKI-15XX Series Command Injection / Buffer Overflow
CyberDanube Security Research 20230511-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| EKI-1524-CE series, EKI-1522 series, EKI-1521 series vulnerable version| 1.21 fixed version| 1.24 CVE number| CVE-2023-2573,...
CVE-2023-2574
creationtimestamp| type| source ---|---|--- 2023-05-08 16:51:20+00:00| seen| https://t.me/cibsecurity/63419...
CVE-2023-2574
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request...
CVE-2023-2574
The CVE-2023-2574 entry affects Advantech EKI-1524, EKI-1522, and EKI-1521 devices up to firmware version 1.21, where an authenticated user can trigger a command injection through the device-name input in a crafted POST request. Concrete details in connected sources indicate vulnerable versions (...
CVE-2023-2574 Authenticated Command Injection
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request...
RHEL 7 : rh-mariadb103-mariadb and rh-mariadb103-galera (RHSA-2020:5246)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5246 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...
RHEL 6 / 7 : rh-mariadb102-mariadb and rh-mariadb102-galera (RHSA-2020:4174)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4174 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...
CVE-2022-2574
Summary: CVE-2022-2574 affects the WordPress plugin Meks Easy Social Share (versions before 1.2.8). The root cause is inadequate sanitisation/escaping of plugin settings, enabling stored XSS by high-privilege users (e.g., admins), potentially in multisite environments where unfiltered_html is dis...
CVE-2022-2574 Meks Easy Social Share < 1.2.8 - Admin+ Stored Cross-Site Scripting
The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
SUSE: Security Advisory (SUSE-SU-2022:2574-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Rocky Linux 8 : rpm (RLSA-2021:2574)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:2574 advisory. - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiabl...
AlmaLinux 8 : mariadb-connector-c (ALSA-2020:5503)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:5503 advisory. - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior...
AlmaLinux 8 : rpm (ALSA-2021:2574)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:2574 advisory. - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingl...
Mageia: Security Advisory (MGASA-2019-0151)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2020-0072)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NewStart CGSL CORE 5.05 / MAIN 5.05 : mariadb Multiple Vulnerabilities (NS-SA-2021-0162)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has mariadb packages installed that are affected by multiple vulnerabilities: - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.45 and prior,...