CVE-2024-2750

CVE-2024-2750 affects Exclusive Addons for Elementor (WordPress). A Stored XSS via the Button widget URL parameter exists in all versions up to 2.6.9.3 due to insufficient input sanitization/output escaping. Authenticated attackers with contributor+ privileges can inject scripts executed when use...

WordPress Exclusive Addons Elementor Plugin <= 2.6.9.3 is vulnerable to Cross Site Scripting (XSS)

Software Exclusive Addons Elementor Type Plugin Vulnerable versions = 2.6.9.3 Fixed in 2.6.9.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2750 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4df0b84e184c Credits wesley...

Ubuntu 16.04 ESM : Drupal vulnerabilities (USN-4773-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4773-1 advisory. It was discovered that Drupal did not properly process certain input. An attacker could use this vulnerability to execute arbitrary code or completely...

SUSE SLES15 Security Update : terraform-provider-helm (SUSE-SU-2023:2750-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2750-1 advisory. - rebuild the package with the go 1.20 security release bsc1206346. Tenable has extracted the preceding description block directly from the...

CVE-2023-2750

creationtimestamp| type| source ---|---|--- 2023-05-24 16:26:53+00:00| seen| https://t.me/cibsecurity/64676 2025-01-16 15:56:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1962...

CVE-2023-2750

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...

CVE-2023-2750 SQLi in Cityboss Software's E-municipality

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...

CVE-2023-2750 SQLi in Cityboss Software's E-municipality

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...

CVE-2023-2750

CVE-2023-2750 affects Cityboss E-municipality (versions prior to 6.05). It is an SQL Injection vulnerability caused by improper neutralization of certain elements in SQL commands. Impact, as described, includes potential high confidentiality, integrity, and availability risks. Remediation recomme...

CVE-2022-2750

creationtimestamp| type| source ---|---|--- 2022-08-11 12:31:58+00:00| seen| https://t.me/cibsecurity/47935...

CVE-2022-2750

CVE-2022-2750 affects SourceCodester Company Website CMS. The vulnerability resides in an unknown function of the file /dashboard/add-service.php (Add Service Handler) and allows unrestricted uploads, with remote exploitation potential. The vulnerability is labeled critical (NVD CVSSv3.1: 9.8, ne...

Mageia: Security Advisory (MGASA-2015-0121)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2750-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

CVE-2020-2750

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-2750

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-2750

The CVE-2020-2750 entry concerns Oracle E-Business Suite General Ledger, specifically the Account Hierarchy Manager component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is described as easily exploitable with unauthenticated network access via HTTP, allowing access ...

CVE-2019-2750

The CVE-2019-2750 entry concerns the MICROS Retail-J component of Oracle Retail Applications (Internal Operations). Affected versions are 12.1.0, 12.1.1, 12.1.2 and 13.1. The vulnerability is exploitable over network via HTTP by an unauthenticated attacker and can lead to unauthorized data access...

CVE-2019-2750

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 12.1.0, 12.1.1, 12.1.2 and 13.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2750

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 12.1.0, 12.1.1, 12.1.2 and 13.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...