33 matches found
CVE-2014-10075
creationtimestamp| type| source ---|---|--- 2018-10-05 12:20:13+00:00| seen| https://t.me/cibsecurity/539...
CVE-2014-10075
The karo gem 2.3.8 for Ruby allows Remote command injection via the host field...
CVE-2014-10075
CVE-2014-10075 affects the Ruby karo gem (v2.3.8) and enables Remote command injection via the host field. The flaw resides in db.rb where metacharacters are mishandled, allowing an attacker to execute arbitrary commands (examples show building and executing a shell command with unsanitized input...
CVE-2018-10075
Cross-site scripting XSS vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature...
CVE-2018-10075
Cross-site scripting XSS vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature...
CVE-2018-10075
Zoho ManageEngine EventLog Analyzer 11.12 is affected by an XSS vulnerability that can be exploited remotely via the import logs feature. The issue allows an attacker to inject arbitrary web script or HTML when processing logs. Connected sources (NVD, CNVD, PRION, CVELIST) confirm the product/ver...
CVE-2017-10075
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2017-10075
Oracle WebCenter Content (Content Server) versions 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0 are susceptible to Cross-Site Scripting (XSS). The vulnerability allows an unauthenticated, network-accessing attacker (via HTTP) to cause the browser of visiting users to execute HTML/JavaScript, potentiall...
Oracle Web Center 11.1.1.9.0 / 12.2.1.1.0 / 12.2.1.2.0 XSS
Oracle Web Center XSS Details ======================================================================================== Product: Oracle Web Center Versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Security-Risk: High Remote-Exploit: yes Vendor-URL: https://www.oracle.com/ CVE-ID: CVE-2017-10075 CVSS: 8....
Oracle WebCenter Content Server Multiple Vulnerabilities (July 2017 CPU)
The version of Oracle WebCenter Content running on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the Content Server component that allows an unauthenticated, remote attacker to impact confidentiality and integrity. Note that this issue only applies to...
DEBIAN-CVE-2016-10075
The tqdm.version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory...
CVE-2016-10075
The tqdm.version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory...
CVE-2016-10075
CVE-2016-10075 affects the tqdm Python package, specifically the tqdm._version module, with vulnerable versions including 4.4.1 and 4.10. A local attacker could cause arbitrary code execution by crafting a git log in the current working directory. The issue arises from how the module processes re...