85 matches found
CVE-2021-0345
In mobilelogd, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...
CVE-2022-0345
The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfwsearchusers AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes finding the first letter, then the second one, then the third one...
EUVD-2026-0345
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
CVE-2019-0345
A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java Administrator System Overview, versions 7.30, 7.31, 7.40, 7.50, by sending a specially crafted XML file and trick the application server into leaking authentication credentials for its own SAP...
CVE-2025-0345
creationtimestamp| type| source ---|---|--- 2025-01-09 09:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcdpuwlyl25 2025-01-09 11:04:21+00:00| seen| https://t.me/cvedetector/14822...
CVE-2025-0345
CVE-2025-0345 affects leiyuxi cy-fast 1.0. The vulnerable component is the function listData in /sys/menu/listData, where misordering of arguments enables SQL injection. Exploitation is described as remote, and public disclosures exist. Current connected sources confirm the vulnerability, its rem...
CVE-2025-0345 leiyuxi cy-fast listData sql injection
A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sys/menu/listData. The manipulation of the argument order leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...
CVE-2025-0345 leiyuxi cy-fast listData sql injection
A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sys/menu/listData. The manipulation of the argument order leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...
Fedora: Security Advisory (FEDORA-2024-12f0caa904)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important Photon OS Security Update - PHSA-2024-5.0-0345
Updates of 'linux-esx', 'linux', 'curl', 'linux-rt' packages of Photon OS have been released...
Photon OS 3.0: Linux PHSA-2021-3.0-0345
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0345. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Fedora 40 : rust-sequoia-chameleon-gnupg / rust-sequoia-gpg-agent / etc (2024-12f0caa904)
The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-12f0caa904 advisory. - Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345. - Update the sequoia-keystore crate to version 0.5.1. - Update the...
CentOS 7 : python-pillow (RHSA-2024:0345)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0345 advisory. - An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a...
RHEL 7 : python-pillow (RHSA-2024:0345)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0345 advisory. The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representatio...
RHSA-2024:0345
creationtimestamp| type| source ---|---|--- 2024-01-23 18:16:47+00:00| seen| https://t.me/ctinow/172196...
Oracle Linux 7 : python-pillow (ELSA-2024-0345)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-0345 advisory. 2.0.0-24gitd1c6db8 - Security fix for CVE-2023-44271 Resolves: RHEL-15459 Tenable has extracted the preceding description block directly from the Oracle Linux...
CVE-2024-0345
creationtimestamp| type| source ---|---|--- 2024-01-09 22:26:47+00:00| seen| https://t.me/ctinow/165399 2024-01-16 23:16:47+00:00| seen| https://t.me/ctinow/169034 2024-01-26 10:11:43+00:00| seen| https://t.me/ctinow/174101...
CVE-2024-0345 CodeAstro Vehicle Booking System User Registration usr-register.php cross site scripting
A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-register.php of the component User Registration. The manipulation of the argument FullName/LastName/Address with the input alertdocument.cookie...
CVE-2024-0345
CVE-2024-0345 affects CodeAstro Vehicle Booking System 1.0, in the User Registration component (usr/usr-register.php). A cross-site scripting vulnerability arises from manipulating the arguments Full_Name, Last_Name, or Address with input such as , enabling remote exploitation. The exploit has be...
Mageia: Security Advisory (MGASA-2023-0345)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...