58 matches found
CVE-2024-6757 Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 3.23.5 via the getimagealt function. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
WordPress Elementor Website Builder Plugin <= 3.24.5 is vulnerable to Sensitive Data Exposure
Software Elementor Website Builder Type Plugin Vulnerable versions = 3.24.5 Fixed in 3.24.6 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-6757 Patch priority Low CVSS severity Low 4.3 Developer Elementor PSID f4cfefcf22b1 Credits stealthcopter Required...
Rocky Linux 9 : libnbd (RLSA-2024:6757)
The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:6757 advisory. libnbd: NBD server improper certificate validation CVE-2024-7383 Tenable has extracted the preceding description block directly from the Rocky Linux security...
Oracle Linux 9 : libnbd (ELSA-2024-6757)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6757 advisory. 1.18.1-4.0.1 - Add new content to nbdconnecturi.pod 1.18.1-4 - Fix CVE-2024-7383 NBD server improper certificate validation resolves: RHEL-52730 Tenable has...
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : PHP vulnerabilities (USN-6757-2)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6757-2 advisory. USN-6757-1 fixed vulnerabilities in PHP. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : PHP vulnerabilities (USN-6757-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6757-1 advisory. It was discovered that PHP incorrectly handled PHPCLISERVERWORKERS variable. An attacker could possibly use this issu...
CVE-2023-6757
creationtimestamp| type| source ---|---|--- 2024-01-07 04:06:32+00:00| seen| https://t.me/ctinow/164057...
CVE-2023-6757
A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /adplanet/PlanetUser of the component API. The manipulation leads to information disclosure. The attack can be launched remotely. The...
CVE-2023-6757
Thecosy IceCMS 2.0.1 exposes information via the API endpoint /adplanet/PlanetUser. The issue arises in an unknown API functionality, allowing remote access and information disclosure. Publicly disclosed exploits suggest potential attacker access without authentication, with confidentiality impac...
CVE-2023-6757 Thecosy IceCMS API PlanetUser information disclosure
A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /adplanet/PlanetUser of the component API. The manipulation leads to information disclosure. The attack can be launched remotely. The...
CVE-2020-6757
contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows authenticated attackers to remotely execute code via the name parameter...
CVE-2020-6757
The CVE-2020-6757 vulnerability affects Rasilient PixelStor 5000 K (KDI version 4.0.1580-20150629). It resides in contentHostProperties.php and allows an authenticated attacker to remotely execute code via the name parameter. Exposure is network-based with authenticated access required; impact is...
CVE-2019-6757
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2019-6757
CVE-2019-6757 affects Foxit Reader 9.4.16811. The flaw is in ConvertToPDF_x86.dll and stems from not validating the existence of an object before performing operations, enabling remote code execution after user interaction (visit a malicious page or open a malicious file). The current process con...
CVE-2018-6757
creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45961...
CVE-2018-6757
Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...
CVE-2018-6757 True Key (TK) Windows Client - Privilege Escalation vulnerability
Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...
CVE-2018-6757
McAfee True Key Windows client (TK) vulnerable to local privilege escalation on version 5.1.230.7 and earlier due to issues in the McAfee.TrueKey.Service implementation (notably SecureExecute). Public reports indicate multiple local-elevation vulnerability variants that can allow a non-privileged...
CVE-2017-6757
Cisco Unified Communications Manager versions 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) are affected by a blind SQL injection vulnerability. The issue stems from a failure to validate user-supplied input used in SQL queries, bypassing protection filters. An authenticated, remote atta...