102 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-10158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The...
CVE-2024-10158
creationtimestamp| type| source ---|---|--- 2024-10-20 01:31:46+00:00| seen| https://t.me/cvedetector/8372...
CVE-2024-10158 PHPGurukul Boat Booking System session_start session fixiation
A vulnerability classified as problematic has been found in PHPGurukul Boat Booking System 1.0. Affected is the function sessionstart. The manipulation leads to session fixiation. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...
CVE-2024-10158
CVE-2024-10158 affects PHPGurukul Boat Booking System 1.0. The vulnerability is linked to the session_start function, enabling session fixation. Exploitation is described as possible remotely, and public disclosures of the exploit are noted in the connected documents. The issue is documented acro...
CVE-2019-10158
creationtimestamp| type| source ---|---|--- 2023-12-27 15:32:18+00:00| seen| https://t.me/ctinow/159643 2024-03-19 09:07:02+00:00| seen| https://t.me/ctinow/211268...
Mageia: Security Advisory (MGASA-2017-0040)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2017:0568-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1865)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-10158
Infinispan (up to 9.4.14.Final) is affected by an improper implementation of the session fixation protection in the Spring Session integration, leading to incorrect session handling. This vulnerability is documented as CVE-2019-10158. Red Hat’s advisory confirms the issue and provides the remedia...
SUSE SLES12 Security Update : php5 (SUSE-SU-2017:0556-1)
This update for php5 fixes the following issues : - CVE-2016-7478: When unserializing untrusted input data, PHP could end up in an infinite loop, causing denial of service bsc1019550 - CVE-2016-10158: The exifconvertanytoint function in ext/exif/exif.c in PHP allowed remote attackers to cause a...
CVE-2018-10158
CVE-2018-10158 entry is rejected/not used; does not represent an active vulnerability.
Security Bulletin: IBM Flex System Manager (FSM) is affected by a php5 vulnerability (CVE-2016-10158)
Summary A vulnerability has been identified in php5 that is embedded in the IBM FSM. This bulletin addresses the vulnerability. Vulnerability Details CVEID: CVE-2016-10158 DESCRIPTION: PHP is vulnerable to a denial of service, caused by an off-by-one error in exifconvertanytoint function in...
Debian: Security Advisory (DLA-818-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-10158
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Core. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2017-10158
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Core. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2017-10158
CVE-2017-10158 affects Oracle PeopleSoft Products, specifically the PeopleTools Core subcomponent. Affected versions are 8.54, 8.55, and 8.56. The vulnerability is exploitable by an unauthenticated attacker who can access the system over HTTP. Attacks require human interaction from a person other...
CVE-2017-10158
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Core. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
Amazon Linux AMI : php70 (ALAS-2017-812)
Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image. CVE-2016-10168 In all versions of PHP 7, during the unserialization process, resizing the...
Medium: php70
Issue Overview: Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image. CVE-2016-10168 In all versions of PHP 7, during the unserialization...