131 matches found
MiracleLinux 7 : xorg-x11-server-1.20.4-27.el7 (AXSA:2024-7440:02)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7440:02 advisory. xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer CVE-2023-6816 xorg-x11-server: reattaching to different master devi...
MiracleLinux 8 : xorg-x11-server-Xwayland-21.1.3-15.el8 (AXSA:2024-8302:02)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-8302:02 advisory. xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty CVE-2023-5367 xorg-x11-server: out-of-bounds memory reads/writ...
CVE-2021-0409
In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561359; Issue ID: ALPS05561359...
EUVD-2026-0409
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
Linux Distros Unpatched Vulnerability : CVE-2020-0409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additiona...
TencentOS Server 2: xorg-x11-server (TSSA-2024:0027)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0027 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
CVE-2025-0409
A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java. The manipulation of the argument typeName leads to sql injection. It is possible to...
CVE-2020-0409
In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8...
Linux Distros Unpatched Vulnerability : CVE-2024-0409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with...
Linux Distros Unpatched Vulnerability : CVE-2013-0409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38...
CVE-2025-0409
A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java. The manipulation of the argument typeName leads to sql injection. It is possible to...
CVE-2025-0409
creationtimestamp| type| source ---|---|--- 2025-01-13 02:40:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113818732164445938 2025-01-13 03:08:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1349 2025-01-13 03:15:49+00:00| seen|...
CVE-2025-0409 liujianview gymxmjpa MembertypeController.java MembertypeDaoImpl sql injection
A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java. The manipulation of the argument typeName leads to sql injection. It is possible to...
CVE-2025-0409 liujianview gymxmjpa MembertypeController.java MembertypeDaoImpl sql injection
A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java. The manipulation of the argument typeName leads to sql injection. It is possible to...
CVE-2025-0409
The CVE-2025-0409 entry concerns liujianview gymxmjpa 1.0. The vulnerability occurs in the function MembertypeDaoImpl within MembertypeController.java, where manipulation of the typeName argument enables SQL injection. It is exploitable remotely and, per the original description, the exploit has ...
CBL Mariner 2.0 Security Update: xorg-x11-server (CVE-2024-0409)
The version of xorg-x11-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0409 advisory. - A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong typ...
CVE-2024-0409 affecting package xorg-x11-server for versions less than 1.20.10-12
CVE-2024-0409 affecting package xorg-x11-server for versions less than 1.20.10-12. A patched version of the package is available...
Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2024-2079)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 8 : xorg-x11-server (ELSA-2024-2995)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2995 advisory. - Fix use after free related to CVE-2024-21886 - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408 and...
Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2024-2996)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-2996 advisory. - Fix for CVE-2023-6377, CVE-2023-6478 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...