CVE-2022-0243

creationtimestamp| type| source ---|---|--- 2022-01-19 22:46:45+00:00| seen| https://t.me/cibsecurity/35891...

CVE-2022-0243

Cross-site Scripting XSS - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2...

CVE-2022-0243

Cross-site Scripting XSS - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2...

CVE-2022-0243

Summary (CVE-2022-0243): Stored Cross-site Scripting (XSS) vulnerability in Orchard Core prior to 1.2.2, affecting the NuGet package OrchardCore.Application.Cms.Targets. The root cause, as stated in sources, is inadequate escaping/validation of user-submitted data, leading to malicious JavaScript...

CVE-2022-0243 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore

Cross-site Scripting XSS - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2...

Backdoor.Win32.Zombam.gen Cross Site Scripting

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/ff6516c881dee555b0cd253408b64404.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.gen Vulnerability: Cross Site Scripting XSS Description: Zombam malware listen...

CVE-2021-0243

Improper Handling of Unexpected Data in the firewall policer of Juniper Networks Junos OS on EX4300 switches allows matching traffic to exceed set policer limits, possibly leading to a limited Denial of Service DoS condition. When the firewall policer discard action fails on a Layer 2 port, it wi...

CVE-2021-0243

CVE-2021-0243 affects Juniper Networks Junos OS on the EX4300, where the firewall policer’s discard action can fail on a Layer 2 port, allowing traffic to pass and be forwarded even when policer limits are exceeded. This impacts IPv4 policing (not IPv6 or firewall policing actions) and can manife...

SUSE: Security Advisory (SUSE-SU-2018:0243-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Junos OS Vulnerability (JSA11136)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11136 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

CVE-2020-0243

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0243

CVE-2020-0243 is a Media Framework elevation-of-privilege vulnerability in Android. In clearPropValue of MediaAnalyticsItem.cpp, an improper locking leads to a use-after-free that could allow a local attacker to escalate privileges within the media server. Impact is described as local escalation ...

Important Photon OS Security Update - PHSA-2020-0243

Updates of 'git' packages of Photon OS have been released...

RHEL 8 : nss (RHSA-2020:0243)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0243 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

CVE-2015-0243

Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allow remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2015-0243

CVE-2015-0243 affects PostgreSQL and specifically its contrib/pgcrypto module. It is a buffer-overflow vulnerability in pgcrypto that, on vulnerable builds, could allow a remote authenticated user to crash the server and potentially execute arbitrary code via unspecified vectors. Affected version...

NewStart CGSL CORE 5.05 / MAIN 5.05 : mariadb Multiple Vulnerabilities (NS-SA-2019-0243)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has mariadb packages installed that are affected by multiple vulnerabilities: - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Storage Engines. Supported versions that are affected are 5.5.61...

CVE-2013-0243

haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections...

CVE-2013-0243

TLS-lib haskell-tls-extra prior to 0.6.1 fails to enforce Basic Constraints in certificate validation, treating any cert as a CA. This enables MITM via forged certs. Remediation: upgrade to 0.6.1 or newer; affected versions include those before 0.6.1 per HSEC-2023-0005 and RH/NVD records.

Buffer Overflow

PostgreSQL is an advanced object-relational database management system DBMS. An information leak flaw was found in the way the PostgreSQL database server handled certain error messages. An authenticated database user could possibly obtain the results of a query they did not have privileges to...