174 matches found
ROOT-OS-UBUNTU-2204-CVE-2022-1205 CVE-2022-1205 in rootio-linux - Patched by Root
Root has patched CVE-2022-1205 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
CVE-2022-1205
creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
MiracleLinux 7 : vim-7.4.160-1.el7.1 (AXSA:2016-1205:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-1205:01 advisory. VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular...
MiracleLinux 3 : firefox-3.6.7-3.0.1.AXS3, xulrunner-1.9.2.7-3.0.1.AXS3 (AXSA:2010-391:05)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-391:05 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. XULRunner provides the XUL Runtime...
EUVD-2014-9457
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2022-1205
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This fl...
CVE-2024-1205
The Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the nouvellouploadcsvfile function in all versions up to, and including, 1.2.2. This...
SUSE: Security Advisory (SUSE-SU-2024:1205-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
$657 Bounty Awarded for Arbitrary File Upload Patched in WEmanage App Worker WordPress Plugin
On February 1st, 2024, during our Bug Bounty Extravaganza, we received a submission for an Arbitrary File Upload vulnerability in Management App for WooCommerce, a WordPress plugin with 1,000+ active installations. This vulnerability makes it possible for authenticated users such as subscribers a...
WordPress Management App for WooCommerce Plugin <= 1.2.2 is vulnerable to Arbitrary File Upload
Software Management App for WooCommerce Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-1205 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 4f48ec18525e Credits Lucio Sá Required privile...
CVE-2024-1205
The Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the nouvellouploadcsvfile function in all versions up to, and including, 1.2.0. This...
CVE-2024-1205
The CVE-2024-1205 entry describes an Arbitrary File Upload vulnerability in the WordPress plugin Management App for WooCommerce (WEmanage App Worker). All versions up to and including 1.2.0 are affected. An authenticated user (Subscriber+) can call the CSV upload API without proper file-type vali...
CVE-2024-1205 Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring <= 1.2.2 - Authenticated (Subscriber+) Arbitrary File Upload
The Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the nouvellouploadcsvfile function in all versions up to, and including, 1.2.2. This...
Malicious code in wlwz-2312-1205 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5062f673e784dd078386cafe6d862c073150815d812ea3c95174385ec0f4734e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CBL Mariner 2.0 Security Update: kernel (CVE-2022-1205)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1205 advisory. - A NULL pointer dereference flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality in...
CVE-2023-1205
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections...
CVE-2023-1205
NETGEAR Nighthawk WiFi 6 Router (prior to v1.0.10.94) is affected by a CSRF vulnerability caused by improperly implemented protections on all endpoints. This allows cross-site requests to be forged without user interaction. The issue is documented in CVE-2023-1205 and corroborated by multiple sou...
CVE-2022-1205 affecting package kernel for versions less than 5.15.67.1-4
CVE-2022-1205 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...
CVE-2022-1205 affecting package kernel 5.10.134.1-2
CVE-2022-1205 affecting package kernel 5.10.134.1-2. A patched version of the package is available...
BELL-CVE-2022-1205 CVE-2022-1205 does not affect BellSoft software
Bulletin has no description...