155 matches found
WordPress SiteOrigin Widgets Bundle Plugin <= 1.58.3 is vulnerable to Cross Site Scripting (XSS)
Software SiteOrigin Widgets Bundle Type Plugin Vulnerable versions = 1.58.3 Fixed in 1.58.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1058 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f6e686205585 Credits wesley wcraf...
K000137875: PostGreSQL vulnerability CVE-2018-1058
Security Advisory Description A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...
BELL-CVE-2018-1058 CVE-2018-1058 does not affect BellSoft software
Bulletin has no description...
CVE-2023-1058
creationtimestamp| type| source ---|---|--- 2023-02-27 14:26:50+00:00| seen| https://t.me/cibsecurity/58930...
CVE-2023-1058 SourceCodester Doctors Appointment System create-account.php sql injection
A vulnerability classified as critical has been found in SourceCodester Doctors Appointment System 1.0. This affects an unknown part of the file create-account.php. The manipulation of the argument newemail leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
CVE-2023-1058
CVE-2023-1058 affects SourceCodester Doctors Appointment System 1.0. The vulnerability is an SQL injection in create-account.php triggered by the newemail parameter. It can be exploited remotely and has been disclosed publicly. Affected component: create-account.php; root cause: improper handling...
FreeBSD : gitea -- Open Redirect on login (83466f76-aefe-11ec-b4b6-d05099c0c059)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 83466f76-aefe-11ec-b4b6-d05099c0c059 advisory. - Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5. CVE-2022-1058 Note that...
CVE-2022-1058
creationtimestamp| type| source ---|---|--- 2022-03-24 17:29:40+00:00| seen| https://t.me/cibsecurity/39493...
CVE-2022-1058
CVE-2022-1058 affects Gitea (go-gitea/gitea) versions before 1.16.5. The issue is an open redirect in the login flow that can redirect users to a malicious site via redirect_to, potentially exposing sensitive information or enabling unauthorized actions. The Nuclei template and related advisories...
CVE-2022-1058 Open Redirect on login in go-gitea/gitea
Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...
Mageia: Security Advisory (MGASA-2018-0446)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1058-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:1058-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:0876-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : 389-ds-base (EulerOS-SA-2021-1058)
According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An...
CVE-2021-1058
creationtimestamp| type| source ---|---|--- 2021-01-08 18:41:47+00:00| seen| https://t.me/cibsecurity/21819...
CVE-2021-1058
CVE-2021-1058 – NVIDIA vGPU vulnerability : Affects NVIDIA vGPU software in the guest kernel mode driver and vGPU plugin, where input data size is not validated. This improper validation can lead to data tampering or denial of service. Affected versions are vGPU 8.x (before 8.6) and 11.0 (before ...
Sql injection
It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the searchpath during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the...
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2018-1058, CVE-2018-10936, CVE-2019-9193)
Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerabilities 3 issues for Postgresql: 1 for a flaw in the searchpath setting2, 1 for a failure to check the host name if a host name verifier was not provided to the driver and...