19 matches found
CVE-2025-10734
creationtimestamp| type| source ---|---|--- 2026-03-23 12:23:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq2h2u4ro2y...
CVE-2024-10734
creationtimestamp| type| source ---|---|--- 2024-11-03 15:00:54+00:00| seen| https://t.me/cvedetector/9651...
CVE-2024-10734 Project Worlds Life Insurance Management System editPayment.php sql injection
A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument reciptno leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-10734 Project Worlds Life Insurance Management System editPayment.php sql injection
A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument reciptno leads to sql injection. It is possible to initiate the attack remotely. The...
Mageia: Security Advisory (MGASA-2022-0214)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated trojita packages fix security vulnerability
An attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If...
CVE-2020-10734
creationtimestamp| type| source ---|---|--- 2021-02-11 20:42:49+00:00| seen| https://t.me/cibsecurity/23457...
CVE-2020-10734
A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable...
CVE-2020-10734
Keycloak is affected by CVE-2020-10734 due to missing CSRF protection on the OIDC logout endpoint. The vulnerability is described across multiple sources as affecting Keycloak implementations used with Red Hat Fuse 7, Red Hat SSO 7, and Red Hat OpenShift Application Runtimes, with the OIDC logout...
CVE-2019-10734
In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...
CVE-2019-10734
In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...
CVE-2019-10734
CVE-2019-10734 affects KDE Trojita 0.7. An attacker with access to S/MIME or PGP encrypted emails can wrap them inside crafted multipart emails; the encrypted parts can be hidden with HTML/CSS or ASCII newlines. If the recipient replies to the benign-looking email, they may leak the plaintext of ...
CVE-2016-10734
creationtimestamp| type| source ---|---|--- 2018-10-29 15:23:20+00:00| seen| https://t.me/cibsecurity/903...
CVE-2016-10734
ProjectSend formerly cFTP r582 allows Insecure Direct Object Reference via includes/actions.log.export.php...
CVE-2016-10734
ProjectSend formerly cFTP r582 allows Insecure Direct Object Reference via includes/actions.log.export.php...
CVE-2016-10734
ProjectSend (formerly cFTP) r582 contains an Insecure Direct Object Reference vulnerability in includes/actions.log.export.php. The CNVD entry notes that ProjectSend is a PHP/MySQL self-hosted application, and the NVD entry documents a high-impact issue with access control to object references. T...
Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2018-10734)
Microsoft Edge is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Edge's handling of memory objects, which allows remote attackers to exploit a vulnerable special WEB page and trick the user into parsing it, which can crash the application or execute arbitrary code...
CVE-2018-10734
CVE-2018-10734 affects KONGTOP DVR models A303, A403, D303, D305, and D403. A backdoor in the Telnetd/related components allows a Print_Password path to disclose login passwords under certain conditions, enabling information disclosure and potential device compromise via the Telnet interface. The...
CVE-2017-10734
CVE-2017-10734 affects IrfanView 4.44 (32-bit). The vulnerability is a buffer/handle issue during .rle processing, with the description noting that a crafted .rle file may cause denial of service or unspecified impact, tied to an invalid handle in wow64. CNVD-2017-14159 corroborates a .rle buffer...