CVE-2024-54452

Summary of CVE-2024-54452 : Kurmi Provisioning Suite is affected by a Directory Traversal/Local File Inclusion vulnerability in the logsSys.do page. Affected versions are prior to 7.9.0.35 and 7.10.x up to 7.10.0.18. The issue allows an attacker who is authenticated as an administrator to trigger...

CVE-2024-54450

An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is received during authentication, the Kurmi application will record the possibly forged IP address mentioned in that header rather than the real IP address that the user logged in from. This fake IP addres...

CVE-2024-54452

An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18. A Directory Traversal and Local File Inclusion vulnerability in the logsSys.do page allows remote attackers authenticated as administrators to trigger the display of unintended files. Any file...

The vulnerability of the DIAScreen component within the integrated engineering software package DIAStudio Smart Machine Suite allows a perpetrator to execute arbitrary code.

The vulnerability of the DIAScreen component in the integrated engineering software package DIAStudio Smart Machine Suite of Delta Electronics is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the DIAScreen component within the integrated engineering software package DIAStudio Smart Machine Suite allows a perpetrator to execute arbitrary code.

The vulnerability of the DIAScreen component in the integrated engineering software package DIAStudio Smart Machine Suite of Delta Electronics is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2025-4231 · Oracle · Oracle Advanced Outbound Telephony +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from...

The vulnerability of the DIAScreen component within the integrated engineering software package DIAStudio Smart Machine Suite allows a perpetrator to execute arbitrary code.

The vulnerability of the DIAScreen component in the integrated engineering software package DIAStudio Smart Machine Suite of Delta Electronics is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2019-2483

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access...

Zimbra Collaboration Suite 安全漏洞

Zimbra Collaboration Suite ZCS is an open source collaboration suite from Zimbra. The product includes WebMail, Calendar, Address Book and more. A security vulnerability exists in Zimbra Collaboration Suite ZCS versions 9.0, 10.0, and 10.1, which originates from a local file in an endpoint in the...

USN-7171-1: PHPUnit vulnerability

It was discovered that PHPUnit incorrectly handled web requests if exposed to the internet. An attacker could possibly use this issue to achive remote code execution or obtain sensitive information...

CVE-2024-12454

The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.23. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject...

CVE-2024-12454

CVE-2024-12454 details (WordPress): The Affiliate Program Suite — SliceWP Affiliates plugin is vulnerable to Cross-Site Request Forgery across all versions up to 1.1.23 due to missing or incorrect nonce validation in a function. This enables unauthenticated attackers to induce an administrator to...

PT-2024-36257 · Unknown · Suiteplugins Video & Photo Gallery

Name of the Vulnerable Software and Affected Versions: SuitePlugins Video & Photo Gallery for Ultimate Member versions n/a through 1.1.0 Description: The issue allows uploading a Web Shell to a web server due to unrestricted file upload with dangerous types. This enables potential attackers to...

CVE-2024-54293

Incorrect Privilege Assignment vulnerability in CE21 CE21 Suite ce21-suite allows Privilege Escalation.This issue affects CE21 Suite: from n/a through = 2.2.0...

CVE-2024-54293 WordPress CE21 Suite plugin <= 2.2.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in CE21 CE21 Suite ce21-suite allows Privilege Escalation.This issue affects CE21 Suite: from n/a through = 2.2.0...

CVE-2024-54293

CVE-2024-54293 is an authenticated-privilege-escalation issue reported in the CE21 Suite (CE21 CE21 Suite) affecting versions from n/a up to 2.2.0. The vulnerability allows privilege escalation without authentication. The CVSS score in the initial report is 9.8 (Network, High confidentiality/inte...

CVE-2024-54293 WordPress CE21 Suite plugin <= 2.2.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in CE21 CE21 Suite allows Privilege Escalation.This issue affects CE21 Suite: from n/a through 2.2.0...

PT-2024-36174 · Unknown · Ce21 Suite

Name of the Vulnerable Software and Affected Versions: CE21 Suite versions n/a through 2.2.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in CE21 Suite. Recommendations: For versions n/a through 2.2.0, at the moment, there...

WordPress plugin CE21 Suite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress CE21 Suite plugin <= 2.2.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin CE21 Suite versions = 2.2.0...