95 matches found
CVE-2023-0964 SourceCodester Sales Tracker Management System view_product.php sql injection
A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. Affected is an unknown function of the file admin/products/viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2023-0964
CVE-2023-0964 affects SourceCodester Sales Tracker Management System 1.0. Affected is an unknown function in file admin/products/view_product.php where manipulating the query parameter id leads to an SQL injection. This allows remote exploitation with high impact to confidentiality, integrity, an...
CVE-2022-0964
creationtimestamp| type| source ---|---|--- 2022-03-15 19:19:45+00:00| seen| https://t.me/cibsecurity/38951...
CVE-2022-0964
Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4...
CVE-2022-0964
CVE-2022-0964 describes a stored XSS in ShowDoc prior to version 2.10.4, triggered by uploading a .webmv file. The root cause stems from insufficient detection of .webmv extensions in the file upload feature, enabling an attacker to upload content that could execute scripts in a user’s browser an...
CVE-2022-0964 Stored XSS viva .webmv file upload in star7th/showdoc
Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4...
CVE-2021-0964
CVE-2021-0964 is an out-of-bounds write in the MP3 decoding path: in C2SoftMP3Dec.cpp, C2SoftMP3::process() a heap buffer overflow can lead to remote information disclosure without extra privileges. Affected Android versions: 9–12. Exploitation requires user interaction. References note this vuln...
CVE-2021-0964
creationtimestamp| type| source ---|---|--- 2021-12-09 09:02:12+00:00| seen| https://t.me/truesecator/2423 2021-12-15 22:35:31+00:00| seen| https://t.me/cibsecurity/34069...
CVE-2020-0964
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'...
CVE-2020-0964
CVE-2020-0964 is a remote code execution vulnerability in Microsoft Windows GDI+ where memory objects are mishandled by the Graphics Device Interface. The issue affects GDI+ processing and can allow an attacker to run arbitrary code on a vulnerable system. Microsoft’s April 2020 Patch Tuesday upd...
Security Bulletin: Denial of Service with WebSphere Application Server affecting Rational Application Developer (CVE-2014-0964)
Summary There is a potential denial of service with IBM WebSphere Application Server 6.0.2 and 6.1 that affects versions of WebSphere Application Server used with IBM Rational Application Developer. Vulnerability Details | Subscribe to My Notifications to be notified of important product support...
CVE-2019-0964
CVE-2019-0964 is rejected/not used per the initial description.
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Rational RequisitePro (CVE-2014-0964)
Summary IBM WebSphere Application Server is shipped as a component of Rational RequisitePro. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details | Subscribe to My Notifications to be notified of importa...
Security Bulletin: IBM Tivoli Key Lifecycle Manager can be affected by a denial of service vulnerability in WebSphere Application Server (CVE-2014-0964)
Summary The IBM WebSphere Application Server component provided with Tivoli Key Lifecycle Manager is vulnerable to potential denial of service. Vulnerability Details CVEID: CVE-2014-0964 DESCRIPTION: The version IBM WebSphere Application Server used by Tivoli Key Lifecycle Manager is subject to a...
CVE-2015-0964
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/arrismotorolasurfboardbackdoorxss.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...
Information disclosure
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows...
KLA11221 Multiple vulnerabilities in Microsoft Windows
Multiple serious vulnerabilities have been found in Microsoft Windows . Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service and possibly to bypass security restrictions. Below is a complete list of...
Solaris 10 (sparc) : 138083-01
SunOS 5.10: snoop patch. Date this patch was last updated by Sun : Aug/04/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...