Low - CVE-2024-56494 - IBM EntireX 11.1 could allow a local user to...
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
Low - CVE-2024-56495 - IBM EntireX 11.1 could allow a local user to...
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
Low - CVE-2024-56496 - IBM EntireX 11.1 could allow a local user to...
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
Low - CVE-2024-56810 - IBM EntireX 11.1 could allow a local user to...
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
Low - CVE-2024-56811 - IBM EntireX 11.1 could allow a local user to...
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
Low - CVE-2024-56812 - IBM EntireX 11.1 could allow a local user to...
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
NA - CVE-2025-25759 - An issue in the component admin_template.php of...
An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request.
NA - CVE-2025-25760 - A Server-Side Request Forgery (SSRF) in the...
A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request.