134 matches found
TencentOS Server 3: samba (TSSA-2022:0219)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0219 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
TencentOS Server 3: .NET 6.0 (TSSA-2023:0219)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0219 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
CVE-2025-0219
A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...
CVE-2020-0219
In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-122836081...
CVE-2019-0219
A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI...
CERT-UA Reports Cyberattacks Targeting Ukrainian State Systems with WRECKSTEEL Malware
The Computer Emergency Response Team of Ukraine CERT-UA has revealed that no less than three cyber attacks were recorded against state administration bodies and critical infrastructure facilities in the country with an aim to steal sensitive data. The campaign, the agency said, involved the use o...
CVE-2025-0219
A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...
CVE-2025-0219
creationtimestamp| type| source ---|---|--- 2025-01-05 05:32:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113774108155794351 2025-01-05 06:38:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/119 2025-01-05 08:19:04+00:00| seen| https://t.me/cvedetector/14295...
CVE-2025-0219 Trimble SPS851 Receiver Status Identity Tab cross site scripting
A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...
CVE-2025-0219
CVE-2025-0219 affects Trimble SPS851, version 488.01, specifically the Receiver Status Identity Tab. The vulnerability arises from improper handling of the System Name parameter, allowing cross-site scripting (XSS). The issue is exploitable remotely, and the public disclosure has occurred per the...
CVE-2025-0219 Trimble SPS851 Receiver Status Identity Tab cross site scripting
A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...
Apache Axis2 Brute Force Utility
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/axis2' require 'metasploit/framework/credentialcollection' class MetasploitModule 'Apache Axis2 Brute Force Utility',...
CVE-2024-0219
CVE-2024-0219 affects Telerik JustDecompile prior to 2024 R1. The issue is in the applications installer component: a local, low-privilege user can manipulate the installation package to elevate privileges on the OS. The connected documents provide the basic vulnerability description and affected...
CVE-2024-0219 Privilege Elevation via Telerik JustDecompile Installer
In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation...
CVE-2021-0219
creationtimestamp| type| source ---|---|--- 2023-11-29 07:57:46+00:00| seen| https://t.me/arpsyndicate/697...
CVE-2023-0219
creationtimestamp| type| source ---|---|--- 2023-03-13 19:23:23+00:00| seen| https://t.me/cibsecurity/59921...
CVE-2023-0219
CVE-2023-0219 affects the FluentSMTP WordPress plugin
WordPress FluentSMTP Plugin < 2.2.3 is vulnerable to Cross Site Scripting (XSS)
Software FluentSMTP Type Plugin Vulnerable versions 2.2.3 Fixed in 2.2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0219 Patch priority Low CVSS severity Low 6.5 Developer WP ManageNinja LLC PSID 66b9f775cfeb Credits Vaibhav Rajput Required...
com.cibuddy:karaf.assembly (=1.0.0), com.kagurabi.services:kagura-assembly (>=1.5 <=1.9) +23 more potentially affected by CVE-2014-0219 via org.apache.karaf:apache-karaf (>=2.0.0 <=4.0.1)
org.apache.karaf:apache-karaf MAVEN version =2.0.0, =1.5, =1.5.6, =4.4.1, =1.1.2, =2.0.0, =2.0.6, =2.7.7, =3.0.0, =1.6.1-incubating, =1.6.1-incubating, =2.2.3, =2.0.0, =2.0.0, =2.2.11 and more Source cves: CVE-2014-0219 Source advisory: OSV:GHSA-M6G3-XQ5Q-4HG9...
Mageia: Security Advisory (MGASA-2016-0219)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...