103 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-10002
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1...
CVE-2024-10002 Rover IDX <= 3.0.0.2905 - Authenticated (Subscriber+) Authentication Bypass to Administrator
The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905. This is due to insufficient validation and capability check on the 'roveridxrefreshsocialcallback' function. This makes it possible for authenticated attackers, with...
CVE-2024-10002 Rover IDX <= 3.0.0.2905 - Authenticated (Subscriber+) Authentication Bypass to Administrator
The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905. This is due to insufficient validation and capability check on the 'roveridxrefreshsocialcallback' function. This makes it possible for authenticated attackers, with...
WordPress Rover IDX Plugin <= 3.0.0.2905 is vulnerable to Privilege Escalation
Software Rover IDX Type Plugin Vulnerable versions = 3.0.0.2905 Fixed in 3.0.0.2906 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-10002 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 08b7032800d8 Credits...
CVE-2005-10002
creationtimestamp| type| source ---|---|--- 2023-10-29 17:18:43+00:00| seen| https://t.me/cibsecurity/73117...
CVE-2005-10002
The CVE-2005-10002 issue affects the almosteffortless secure-files Plugin (WordPress) up to version 1.1. The vulnerability resides in the sf_downloads function within secure-files.php, where manipulation of the downloadfile argument enables path traversal. A fixed version exists: upgrade to versi...
Debian: Security Advisory (DLA-763-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-10002
creationtimestamp| type| source ---|---|--- 2023-03-05 07:41:34+00:00| seen| https://t.me/cibsecurity/59427...
CVE-2008-10002
CVE-2008-10002 affects cfire24 ajaxlife up to 0.3.2. The vulnerability is a cross-site scripting issue tied to unknown code paths, exploitable remotely. A fix is available in version 0.3.3, with patch reference 9fb53b67312fe3f4336e01c1e3e1bedb4be0c1c8 (VDB-222286). Upgrading to 0.3.3 is recommend...
CVE-2011-10002
creationtimestamp| type| source ---|---|--- 2023-02-07 20:46:07+00:00| seen| https://t.me/cibsecurity/57682...
CVE-2011-10002
CVE-2011-10002 affects weblabyrinth 0.3.1; the Labyrinth function in labyrinth.inc.php allows SQL injection. Upgrading to version 0.3.2 mitigates the issue (patch ID 60793fd8c8c4759596d3510641e96ea40e7f60e9; VDB-220221). Connected sources confirm the vulnerability and fix; exploitation status is ...
CVE-2009-10002
creationtimestamp| type| source ---|---|--- 2023-01-13 20:31:13+00:00| seen| https://t.me/cibsecurity/56492...
CVE-2009-10002
The CVE concerns dpup fittr-flickr, specifically the EXIF Preview Handler’s file fittr-flickr/features/easy-exif.js. The vulnerability is a cross-site scripting flaw introduced by unknown processing in that file, with remote initiation possible. Multiple sources (NVD, Red Hat, CVE lists, CNCVD/CN...
CVE-2007-10002
creationtimestamp| type| source ---|---|--- 2023-01-08 12:26:47+00:00| seen| https://t.me/cibsecurity/56135...
CVE-2007-10002
CVE-2007-10002 affects the web-cyradm project, specifically the file auth.inc.php . The vulnerability is a SQL injection caused by manipulation of the arguments login/login_password/LANG , with the attack potentially being launched remotely. Multiple connected sources confirm the issue and cite t...
CVE-2007-10002 web-cyradm auth.inc.php sql injection
A vulnerability, which was classified as critical, has been found in web-cyradm. Affected by this issue is some unknown functionality of the file auth.inc.php. The manipulation of the argument login/loginpassword/LANG leads to sql injection. The attack may be launched remotely. The name of the...
CVE-2012-10002
A vulnerability was found in ahmyi RivetTracker. It has been declared as problematic. Affected by this vulnerability is the function changeColor of the file css.php. The manipulation of the argument setcss leads to cross site scripting. The attack can be launched remotely. The patch is named...
CVE-2012-10002
CVE-2012-10002 affects ahmyi RivetTracker, specifically the changeColor function in css.php. The issue arises from manipulating the set_css argument, enabling cross-site scripting (XSS) via remote access. The vulnerability is documented across multiple sources with the same signature, including a...
CVE-2010-10002
The vulnerability CVE-2010-10002 affects the SimpleSAMLphp package, specifically the simplesamlphp-module-openid OpenID Handler. The issue is an input manipulation in the file templates/consumer.php (AuthState) that enables cross-site scripting. Exploitation can be performed remotely; the attack ...