97 matches found
CVE-2025-0785
Summary: CVE-2025-0785 affects ESAFENET CDG V5, specifically the /SysConfig.jsp file where the user-supplied parameter likely named “help” can be manipulated to trigger cross-site scripting (XSS). The root cause is improper sanitization/handling of the argument, enabling an attacker to inject exe...
SUSE: Security Advisory (SUSE-SU-2024:0785-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHSA-2024:0785
creationtimestamp| type| source ---|---|--- 2024-02-12 18:16:59+00:00| seen| https://t.me/ctinow/183311...
Security Bulletin: Vulnerabilities in Apache Struts affect the IBM FlashSystem models 840 and 900 (CVE-2016-0785 CVE-2016-2162)
Summary Open Source Apache Struts vulnerabilities were disclosed in March 2016. Struts is used by IBM® FlashSystem™ 840 and IBM FlashSystem 900 in its Service Assistant GUI. Vulnerability Details CVEID: CVE-2016-0785 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary co...
CVE-2021-0785
Android 12 security release notes list CVE-2021-0785 in the System category with Type: Elevation of Privilege (EoP) and Severity: Moderate (Android bug ID A-182283321). The connected document confirms the vulnerability's inclusion but provides no further details on root cause, affected component,...
CVE-2023-0785
creationtimestamp| type| source ---|---|--- 2023-02-12 12:28:50+00:00| seen| https://t.me/cibsecurity/57967...
CVE-2023-0785
CVE-2023-0785 affects SourceCodester Best Online News Portal 1.0, where the vulnerability resides in the file check_availability.php. The issue arises from manipulating the username parameter, leading to exposure of sensitive information via data queries. It is a remote attack with high complexit...
Apache Struts forced double OGNL evaluation
Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%" sequence in a tag attribute, aka forced double OGNL evaluation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0785...
CVE-2022-0785
creationtimestamp| type| source ---|---|--- 2022-04-18 22:23:45+00:00| seen| https://t.me/cibsecurity/41060 2026-03-12 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd37p3a2q 2026-05-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...
CVE-2022-0785 Daily Prayer Time < 2022.03.01 - Unauthenticated SQLi
The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the getmonthlytimetable AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...
CVE-2022-0785
The CVE-2022-0785 vulnerability affects the WordPress Daily Prayer Time plugin prior to 2022.03.01. The issue arises because the plugin does not sanitize or escape the month parameter before using it in a SQL statement via the get_monthly_timetable AJAX action, which is accessible to unauthentica...
CVE-2009-0785
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
SUSE: Security Advisory (SUSE-SU-2019:0785-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:0785-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:0785-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
reportallusa.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1165188 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-0785
CVE-2020-0785 is an elevation-of-privilege flaw in the Windows User Profile Service (ProfSvc) caused by improper handling of symlinks. The vulnerability allows a local attacker with low privileges to elevate to higher privileges without user interaction, as documented in the CVE description and c...
CVE-2020-0785
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...
Microsoft Windows Server Memory Corruption (CVE-2019-0785)
A memory corruption vulnerability exists in Microsoft Windows server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...