27 matches found
CVE-2020-7305
Privilege escalation vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials...
CVE-2013-7305
fpw.php in e107 through 1.0.4 does not check the userban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user...
CVE-2023-7305
CVE-2023-7305 concerns SmartBI V8, V9, and V10 with an unrestricted file upload vulnerability in the RMIServlet request handling logic. The issue allows an attacker to trigger sensitive operations or potentially execute arbitrary code on the host via specially crafted requests. The root cause is ...
EUVD-2018-7305
Malware in sbrugna...
CVE-2025-7305 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...
CVE-2025-7305
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-552/...
CVE-2018-7305
MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts...
CVE-2015-7305
The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to fields, which allows remote attackers to obtain sensitive atom property information via vectors involving a "debug context."...
CVE-2024-7305
A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
Autodesk DWG TrueView 25.0.x < 25.0.101.0 (2025.1) (adsk-sa-2024-0014)
The version of Autodesk DWG TrueView installed on the remote host is prior to 25.0.101.0 2025.1. It is, therefore, affected by a vulnerability as referenced in the adsk-sa-2024-0014 advisory. - A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, can force an...
CVE-2024-7305
creationtimestamp| type| source ---|---|--- 2024-08-20 02:54:28+00:00| seen| https://t.me/cvedetector/3577 2025-04-03 22:35:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10361...
MAL-2024-832 Malicious code in wlwz-2312-7305 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b25269036db4654be10dfa348759eaf8b66b433054ef8311cebee2b2c217a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-7305 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b25269036db4654be10dfa348759eaf8b66b433054ef8311cebee2b2c217a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in wlwz-2312-7305
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2008-7305
CVE-2008-7305 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2020-7305
Privilege escalation vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials...
CVE-2020-7305
CVE-2020-7305 affects McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3. The vulnerability is a privilege-escalation flaw where a low-privileged remote attacker can create new rule sets due to incorrect validation of user credentials. The description and Red Hat advisory corroborate...
CVE-2019-7305
Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this can lead to data leakage, information...
CVE-2019-7305
CVE-2019-7305 concerns the eXtplorer PHP-based file manager. The issue stems from a Makefile patch (debian/patches/debian-changes-2.1.0b6+dfsg-1 or adds-a-makefile.patch) that leaves the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP, enabling information disclosure. The ...
CVE-2019-7305 eXtplorer exposes /usr and /etc/extplorer over HTTP
Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this can lead to data leakage, information...