33 matches found
CVE-2020-10204
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...
CVE-2020-10204
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. Recent assessments: ericalexanderorg at April 03, 2020 1:18pm UTC reported: Wording on this and eludes to an authenticated RCE, but they consider an anonymous user authenticated. Nexus servers store artifacts that could be...
CVE-2017-10204
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
CVE-2017-10204
CVE-2017-10204 affects Oracle VM VirtualBox (Core subcomponent) and relates to VirtualBox process hardening. The connected material documents that attackers could bypass hardening checks to load unverified DLLs into the VirtualBox process via COM hijacking or DLL loading behavior, enabling arbitr...
CVE-2017-10204
creationtimestamp| type| source ---|---|--- 2017-08-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42425...
Oracle VirtualBox Multiple Unspecified Vulnerabilities (Jul 2017) - Windows
Oracle VirtualBox is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle VM VirtualBox 5.1.x < 5.1.24 (July 2017 CPU)
The version of Oracle VM VirtualBox installed on the remote host is 5.1.x prior to 5.1.24. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified vulnerabilities exist in the Core component that allow a local attacker to have an impact on confidentiality, integrity, and...
Oracle VirtualBox Multiple Unspecified Vulnerabilities (Jul 2017) - Mac OS X
Oracle VirtualBox is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
DEBIAN-CVE-2016-10204
SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php...
CVE-2016-10204
SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php...
CVE-2016-10204
SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php...
CVE-2016-10204
CVE-2016-10204 is a SQL injection vulnerability in ZoneMinder 1.30 and earlier, allowing remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php. A concrete PoC exploit exists (CVE-2016-10204_Webshell) demonstrating manual exploitation and PH...