11576 matches found
WordPress WooCommerce Support Ticket System Plugin <= 17.6 is vulnerable to Arbitrary File Deletion
Software WooCommerce Support Ticket System Type Plugin Vulnerable versions = 17.6 Fixed in 17.8 OWASP Top 10 A3: Injection Classification Arbitrary File Deletion CVE CVE-2024-10625 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID b5c39d8368a0 Credits Tonn Required privile...
PT-2024-16419 · WordPress · Woocommerce Support Ticket System
Name of the Vulnerable Software and Affected Versions: WooCommerce Support Ticket System plugin for WordPress versions up to, and including, 17.7 Description: The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validati...
WatchGuard多款产品 安全漏洞
WatchGuard EPDR and others are products of WatchGuard USA.WatchGuard EPDR is an application.WatchGuard Panda AD360 is an advanced cybersecurity solution that integrates EPP, EDR and machine learning technologies.WatchGuard Panda Dome is an antivirus program. A security vulnerability exists in...
CVE-2024-10203
Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...
CVE-2024-10203
Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...
CVE-2024-10203 Agent Arbitrary File Deletion
Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...
CVE-2024-10203 Agent Arbitrary File Deletion
Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...
CVE-2024-10203
CVE-2024-10203 affects Zohocorp/ManageEngine Endpoint Central. Vulnerable components are the Endpoint Central agent on Windows machines, with version ranges 11.3.2416.21 and below and 11.3.2428.9 and below. root cause is described as insecure privilege management that enables Arbitrary File Delet...
PT-2024-39002 · Watchguard +1 · Watchguard Epdr +2
Name of the Vulnerable Software and Affected Versions: WatchGuard EPDR versions prior to 8.00.23.0000 Panda AD360 versions prior to 8.00.23.0000 Panda Dome versions prior to 22.03.00 Description: The issue is related to improper privilege management, allowing local attackers to escalate privilege...
ZOHO ManageEngine Endpoint Central 安全漏洞
ZOHO ManageEngine Endpoint Central is a desktop management system from ZOHO USA. A security vulnerability exists in ZOHO ManageEngine Endpoint Central versions 11.3.2416.21 and earlier and 11.3.2428.9 and earlier, which stems from the vulnerability to arbitrary file deletion attacks in machines...
Google Nearby 安全漏洞
Google Nearby is a series of connectivity-focused projects from the American company Google, Inc. for building cross-device experiences. A security vulnerability previously existed in Google Nearby version v1.0.2002.2, which stemmed from the fact that when a Payload Transfer frame of type FILE wa...
CVE-2024-20529
Cisco Identity Services Engine (ISE) API vulnerability could allow an authenticated remote attacker with Super Admin credentials to read or delete arbitrary files due to insufficient validation of user-supplied API parameters. PT-2024-18676 notes affected software prior to 3.3.0 and recommends up...
CVE-2024-20527
CVE-2024-20527 affects Cisco Identity Services Engine (ISE). The vulnerability is in the ISE API where insufficient validation of user-supplied parameters in API requests could allow an authenticated remote attacker with Super Admin credentials to read or delete arbitrary files on the device’s un...
CVE-2024-20527 Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability
A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. To exploit this vulnerability, the attacker would need valid Super Admin credentials. This vulnerability is due to insufficient validation of user-suppli...
Arbitrary File Deletion
funadmin/funadmin is vulnerable to Arbitrary File Deletion. The vulnerability is due to a lack of proper access control in the /curd/index/delfile endpoint, which allows unauthorized users to delete files...
Cisco Identity Services Engine 路径遍历漏洞
Cisco Identity Services Engine is an environment-aware platform from Cisco, USA. A path traversal vulnerability exists in Cisco Identity Services Engine that can be exploited by an attacker to read or delete arbitrary files...
WordPress Video Gallery for WooCommerce plugin <= 1.31 - Missing Authorization to Unauthenticated Limited File Deletion vulnerability
Missing Authorization to Unauthenticated Limited File Deletion vulnerability discovered by incognito in WordPress Plugin Video Gallery for WooCommerce versions = 1.31...
SUSE CVE-2024-49381
Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information loss. Version 0.7.2 fixes the vulnerabili...