CVE-2024-35700

Incorrect Privilege Assignment vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through = 5.1.8...

CVE-2024-35700 WordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability

Improper Privilege Management vulnerability in DeluxeThemes Userpro allows Privilege Escalation.This issue affects Userpro: from n/a through 5.1.8...

CVE-2024-35700

CVE-2024-35700 affects the WordPress plugin “UserPro” (DeluxeThemes) up to version 5.1.8. The issue is described as Improper Privilege Management enabling Unauthenticated Account Takeover with privilege escalation. Impact as stated: confidential and integrity/availability impact; CVSS v3.1 base s...

WordPress Userpro Plugin <= 5.1.8 is vulnerable to Privilege Escalation

Software Userpro Type Plugin Vulnerable versions = 5.1.8 Fixed in 5.1.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-35700 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID fbe11c6e1e92 Credits Rafie Muhammad...

CVE-2022-35700

Adobe Bridge CVE-2022-35700 affects Bridge versions 12.0.2 (and earlier) and 11.1.3 (and earlier). It is due to an out-of-bounds write that could allow arbitrary code execution in the user’s context. Exploitation requires user interaction (victim must open a malicious file). Remediation per APSB2...

Adobe Bridge 11.x < 11.1.4 / 12.x < 12.0.3 Multiple Vulnerabilities (APSB22-49)

The version of Adobe Bridge installed on the remote Windows host is prior to 11.1.4 or 12.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-49 advisory. - Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Heap-based Buffer...

CVE-2020-35700

creationtimestamp| type| source ---|---|--- 2021-02-13 20:36:37+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2696 2024-10-09 19:13:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2677...

CVE-2020-35700

CVE-2020-35700 affects LibreNMS prior to 21.1.0, where a second-order SQL injection in Widgets/TopDevicesController.php (Top Devices widget) enables remote authenticated attackers to execute arbitrary SQL via the sort_order parameter on /ajax/form/widget-settings. Exploitation status is not detai...

CVE-2023-35700

This CVE entry is rejected/not used and does not represent an active vulnerability entry.