145 matches found
CVE-2024-0501
CVE-2024-0501 affects SourceCodester House Rental Management System 1.0, targeting the Manage Invoice Details function. The vulnerability arises from user-controlled input in the Invoice parameter, enabling cross-site scripting. Exploitation is possible remotely and has been disclosed publicly (V...
CVE-2024-0501 SourceCodester House Rental Management System Manage Invoice Details cross site scripting
A vulnerability has been found in SourceCodester House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Manage Invoice Details. The manipulation of the argument Invoice leads to cross site scripting. The attack...
CVE-2023-0501
CVE-2023-0501 affects the WordPress plugin WP Insurance (versions before 2.1.4). The vulnerability is a lack of CSRF validation when activating plugins, which could let an attacker trigger a CSRF attack that causes logged-in admins to activate arbitrary plugins. Root cause: missing CSRF protectio...
CVE-2023-0501 WP Insurance < 2.1.4 - Arbitrary Plugin Activation via CSRF
The WP Insurance WordPress plugin before 2.1.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...
CVE-2023-0501 WP Insurance < 2.1.4 - Arbitrary Plugin Activation via CSRF
The WP Insurance WordPress plugin before 2.1.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...
MariaDB 10.0.0 < 10.0.18 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.18 advisory. - The compilebranch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of...
Security Bulletin: Potential security exposure when using InfoSphere BigInsights due to vulnerability in Java JDK Version 6
Abstract IBM InfoSphere BigInsights makes use of Java Development Kit JDK Version 6. An unspecified vulnerability affecting availability has been identified in IBM Java 6 that may affect InfoSphere BigInsights. Content VULNERABILITY DETAILS: CVE-2012-0501 DESCRIPTION: An unspecified vulnerability...
Slackware: Security Advisory (SSA:2015-132-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2015-132-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-0501
creationtimestamp| type| source ---|---|--- 2022-02-05 18:32:18+00:00| seen| https://t.me/cibsecurity/36923...
CVE-2022-0501
CVE-2022-0501 is a reflected cross-site scripting vulnerability in ptrofimov/beanstalk_console reported to affect versions prior to 1.7.12. The root cause is insufficient sanitization in include.php, enabling arbitrary JavaScript execution in the context of the application. Impact is browser-base...
CVE-2022-0501 Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console
Cross-site Scripting XSS - Reflected in Packagist ptrofimov/beanstalkconsole prior to 1.7.12...
CVE-2022-0501 Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console
Cross-site Scripting XSS - Reflected in Packagist ptrofimov/beanstalkconsole prior to 1.7.12...
SUSE: Security Advisory (SUSE-SU-2012:0603-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability (cisco-sa-webex-vdi-qQrpBwuJ)
According to its self-reported version, Cisco Webex Meetings Desktop App is prior to version 40.6.9, or is 40.8.x prior to 40.8.9 and thus, is affected by a remote code execution vulnerability. An unspecified flaw exists related to the virtualization channel interface that can allow a local...
CVE-2020-0501
Buffer overflow in IntelR Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local access...
CVE-2020-0501
CVE-2020-0501 is a buffer-overflow flaw in Intel Graphics Drivers for Windows prior to 26.20.100.6912 that could let an authenticated local user cause a denial of service. Affected products include Intel Graphics Drivers on Windows for multiple generations; remediation is to update to a newer dri...
High-Severity Flaws Plague Intel Graphics Drivers
Intel has issued security patches for six high-severity vulnerabilities in its Windows graphics drivers which, if exploited, could enable escalation of privilege, denial of service DoS and information disclosure. The graphics driver is software that controls how graphic components work with the...
Intel® Graphics Drivers Advisory
Summary: Potential security vulnerabilities in Intel® Graphics Drivers may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0502 Description:...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...