12 matches found
EUVD-2024-47193
Malicious code in bioql PyPI...
CVE-2024-23355
Memory corruption when keymaster operation imports a shared key...
CVE-2024-6033
The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized data importation due to a missing capability check on the 'importfile' function in all versions up to, and including, 4.0.4. This makes it possible for authenticated attackers,...
CVE-2024-6033
CVE-2024-6033 concerns WordPress plugin Eventin (Event Manager, Events Calendar, Tickets, Registrations). The advisory states a missing capability check on the import_file function across all versions up to and including 4.0.4, enabling authenticated attackers with Contributor-level access and ab...
CVE-2024-6033 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import
The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized data importation due to a missing capability check on the 'importfile' function in all versions up to, and including, 4.0.4. This makes it possible for authenticated attackers,...
CVE-2024-6033 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import
The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized data importation due to a missing capability check on the 'importfile' function in all versions up to, and including, 4.0.4. This makes it possible for authenticated attackers,...
ASB-A-256591023
In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2021-22970
Concrete CMS formerly concrete5 versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable toa. SSRF attacks on the private LAN servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network appsandb. SS...
Fedora Update for glpi-mass-ocs-import FEDORA-2012-10661
Check for the Version of glpi-mass-ocs-import OpenVAS Vulnerability Test Fedora Update for glpi-mass-ocs-import FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
[SECURITY] Fedora 17 Update: glpi-mass-ocs-import-1.6.1-1.fc17
Plugin which allow OCS continuous synchronization and massive importation. The extension Config panel is provided to handle the synchronization option s...
Fedora Update for glpi-mass-ocs-import FEDORA-2011-9690
Check for the Version of glpi-mass-ocs-import OpenVAS Vulnerability Test Fedora Update for glpi-mass-ocs-import FEDORA-2011-9690 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
[SECURITY] Fedora 14 Update: glpi-mass-ocs-import-1.4.2-1.fc14
Plugin which allow OCS continuous synchronization and massive importation. The extension Config panel is provided to handle the synchronization option s...