CVE-2023-0398 Cross-Site Request Forgery (CSRF) in modoboa/modoboa

Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0398

Modoboa/modoboa prior to 2.0.4 is vulnerable to Cross-Site Request Forgery (CSRF). The CSRF flaw allows an attacker to induce state-changing requests in an authenticated user session. The issue is fixed in the 2.0.4 patch release; upgrading to 2.0.4 or applying the patch is the recommended remedi...

Important Photon OS Security Update - PHSA-2022-3.0-0398

Updates of 'libxslt' packages of Photon OS have been released...

CVE-2022-0398

creationtimestamp| type| source ---|---|--- 2022-04-25 20:36:16+00:00| seen| https://t.me/cibsecurity/41391...

CVE-2022-0398

CVE-2022-0398 affects the WordPress plugin ThirstyAffiliates Affiliate Link Manager (versions

Mageia: Security Advisory (MGASA-2017-0398)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 1.0: Mariadb PHSA-2021-1.0-0398

An update of the mariadb package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0398. The text itself is copyright C VMware, Inc...

CVE-2021-0398

creationtimestamp| type| source ---|---|--- 2021-03-10 18:53:25+00:00| seen| https://t.me/cibsecurity/24702...

CVE-2021-0398

CVE-2021-0398 describes a local EoP in Android 11 where ActiveServices.bindServiceLocked could allow a confused deputy to launch a foreground service, requiring no user interaction. The vulnerability is rooted in bindServiceLocked in ActiveServices.java, with the potential to elevate privileges w...

Code Injection and Directory Traversal in plexus-utils

This vulnerability allows unauthenticated remote attackers to inject code and XML as well as perform directory traversal via CVE-2017-1000487 - command injection sonatype-2016-0398 - directory traversal sonatype-2015-0173 - XML Injection The affected versions are before version 7.2.2, and before...

Code Injection and Directory Traversal in plexus-utils

This vulnerability allows unauthenticated remote attackers to inject code and XML as well as perform directory traversal via CVE-2017-1000487 - command injection sonatype-2016-0398 - directory traversal sonatype-2015-0173 - XML Injection The affected versions are before version 7.2.2, and before...

CVE-2020-0398

CVE-2020-0398 affects Android 10 and 11, relating to updateMwi in NotificationMgr.java. A PendingIntent error allows a permission bypass that could cause local information disclosure without user interaction; exploitation requires User execution privileges but not explicit user action. Affected c...

CVE-2010-0398

creationtimestamp| type| source ---|---|--- 2019-10-31 01:33:18+00:00| seen| https://t.me/cibsecurity/7795 2019-11-05 18:31:26+00:00| seen| https://t.me/cibsecurity/7886 2024-02-01 09:06:56+00:00| seen| https://t.me/ctinow/177398...

CVE-2010-0398

The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack...

CVE-2010-0398

The CVE-2010-0398 entry concerns the autokey package: the init script before version 0.61.3-2 allows local attackers to write arbitrary files through a symlink attack. Documents consistently describe a local arbitrary-file-write vulnerability caused by the init script, but do not provide details ...

CVE-2018-0398

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack. Cisco Bug IDs: CSCvg71018...

CVE-2018-0398

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack. Cisco Bug IDs: CSCvg71018...

Security Bulletin: IBM Cognos Business Intelligence Server : IBM Cognos Business Intelligence Server is affected by CVE-2016-0398

Summary This bulletin addresses a recently discovered content spoofing vulnerability. Vulnerability Details CVEID: CVE-2016-0398 DESCRIPTION: IBM Cognos Business Intelligence is vulnerable to content spoofing when an attacker familiar with C10 can convince a user to click on a malicious link. CVS...

Solaris 10 (x86) : 148976-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Utility/Remote Execution Serverin.rexecd. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successf...

CVE-2017-0398

CVE-2017-0398 is an information-disclosure vulnerability in Android’s Audioserver. According to the sources, it could allow a local malicious application to access data outside of its permission levels. Affected products/versions are Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, with Andro...