2504 matches found
CVE-2024-6949 Gargaj wuhu path traversal
A vulnerability classified as problematic was found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected by this vulnerability is an unknown functionality of the file /pages.php?edit=News. The manipulation leads to path traversal. The attack can be launched remotely. The exploi...
CVE-2024-6946 Flute CMS list code injection
A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been declared as critical. This vulnerability affects unknown code of the file /admin/pages/list. The manipulation of the argument blocks leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2024-6802 SourceCodester Computer Laboratory Management System Master.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Computer Laboratory Management System 1.0. Affected is an unknown function of the file /lms/classes/Master.php?f=saverecord. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...
CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
CVE-2024-6735 itsourcecode Tailoring Management System setgeneral.php sql injection
A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file setgeneral.php. The manipulation of the argument sitename/email/mobile/sms/currency leads to sql injection. The attack can be initiated...
CVE-2024-6732 SourceCodester Student Study Center Desk Management System Users.php sql injection
A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. This vulnerability affects unknown code of the file /sscdms/classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotel...
CVE-2024-37928
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NooTheme Jobmonster allows File Manipulation.This issue affects Jobmonster: from n/a through 4.7.0...
CVE-2024-37932
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in anhvnit Woocommerce OpenPos allows File Manipulation.This issue affects Woocommerce OpenPos: from n/a through 6.4.4...
CVE-2024-37932
CVE-2024-37932 is described in the supplied documents as an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in the OpenPos POS plugin for WooCommerce. The vulnerability is cited as affecting Woocommerce OpenPos versions up to and including 6.4.4. Multipl...
CVE-2024-37932 WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in anhvnit Woocommerce OpenPos allows File Manipulation.This issue affects Woocommerce OpenPos: from n/a through 6.4.4...
CVE-2024-37928
CVE-2024-37928 is a Path Traversal vulnerability in Noo JobMonster (WordPress theme) that enables file manipulation. Affected: Jobmonster
PT-2024-27837 · Unknown · Woocommerce Openpos
Name of the Vulnerable Software and Affected Versions: WooCommerce OpenPos versions through 6.4.4 Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This allows for file manipulation. Recommendations...
PT-2024-37593 · Aimhubio · Aim
Name of the Vulnerable Software and Affected Versions: aimhubio/aim version 3.19.3 Description: The issue arises from improper handling of the run hash and repo.path parameters in the backup run function, allowing remote attackers to manipulate these parameters and create or write to arbitrary fi...
CVE-2024-37497
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetThemeCore jet-theme-core.This issue affects JetThemeCore: from n/a through 2.2.1...
CVE-2024-37497 WordPress JetThemeCore plugin < 2.2.1 - Subscriber+ Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetThemeCore allows File Manipulation.This issue affects JetThemeCore: from n/a before 2.2.1...
CVE-2024-37497
CVE-2024-37497 affects Crocoblock JetThemeCore (WordPress plugin for Elementor). The connected data shows a vulnerability in JetThemeCore up to version 2.2.0 (before 2.2.1) that enables an authenticated user to delete arbitrary files, arising from improper path handling. CVSS v3.1 metrics indicat...
PT-2024-27603 · Crocoblock · Crocoblock Jetthemecore
Name of the Vulnerable Software and Affected Versions: Crocoblock JetThemeCore versions prior to 2.2.1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, which allows File Manipulation...
CVE-2024-39171
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix...
VulnCheck KEV: CVE-2024-37497
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetThemeCore allows File Manipulation.This issue affects JetThemeCore: from n/a before 2.2.1...
