CVE-2025-2750 Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds write

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is...

CVE-2025-2750 Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds write

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is...

Linux Distros Unpatched Vulnerability : CVE-2012-2750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a Security Fix, aka Bug 59533. NOTE: this might be a...

CVE-2020-2750

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2024-2750

CVE-2024-2750 affects Exclusive Addons for Elementor (WordPress). A Stored XSS via the Button widget URL parameter exists in all versions up to 2.6.9.3 due to insufficient input sanitization/output escaping. Authenticated attackers with contributor+ privileges can inject scripts executed when use...

WordPress Exclusive Addons Elementor Plugin <= 2.6.9.3 is vulnerable to Cross Site Scripting (XSS)

Software Exclusive Addons Elementor Type Plugin Vulnerable versions = 2.6.9.3 Fixed in 2.6.9.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2750 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4df0b84e184c Credits wesley...

Ubuntu 16.04 ESM : Drupal vulnerabilities (USN-4773-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4773-1 advisory. It was discovered that Drupal did not properly process certain input. An attacker could use this vulnerability to execute arbitrary code or completely...

SUSE SLES15 Security Update : terraform-provider-helm (SUSE-SU-2023:2750-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2750-1 advisory. - rebuild the package with the go 1.20 security release bsc1206346. Tenable has extracted the preceding description block directly from the...

CVE-2023-2750

creationtimestamp| type| source ---|---|--- 2023-05-24 16:26:53+00:00| seen| https://t.me/cibsecurity/64676 2025-01-16 15:56:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1962...

CVE-2023-2750

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...

CVE-2023-2750 SQLi in Cityboss Software's E-municipality

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...

CVE-2023-2750

CVE-2023-2750 affects Cityboss E-municipality (versions prior to 6.05). It is an SQL Injection vulnerability caused by improper neutralization of certain elements in SQL commands. Impact, as described, includes potential high confidentiality, integrity, and availability risks. Remediation recomme...

CVE-2023-2750 SQLi in Cityboss Software's E-municipality

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...

CVE-2022-2750

creationtimestamp| type| source ---|---|--- 2022-08-11 12:31:58+00:00| seen| https://t.me/cibsecurity/47935...

CVE-2022-2750

CVE-2022-2750 affects SourceCodester Company Website CMS. The vulnerability resides in an unknown function of the file /dashboard/add-service.php (Add Service Handler) and allows unrestricted uploads, with remote exploitation potential. The vulnerability is labeled critical (NVD CVSSv3.1: 9.8, ne...

Mageia: Security Advisory (MGASA-2015-0121)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2750-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

CVE-2020-2750

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-2750

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...