111 matches found
Joomla! Component VJDEO 1.0 - Local File Inclusion
A directory traversal vulnerability in the VJDEO comvjdeo component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1354 info: name: Joomla! Component VJDEO 1.0 - Local File Inclusion author: daffain...
CVE-2026-1354
creationtimestamp| type| source ---|---|--- 2026-04-21 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-06 2026-04-21 23:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk23qvraqb2r...
Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2026-1354)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2023 : php8.2, php8.2-bcmath, php8.2-cli (ALAS2023-2025-1354)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1354 advisory. NOTE: https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7NOTE: https://github.com/php/php-src/commit/c5f28c7cf0a052f48e47877c7aa5c5bcc54f1cfcDEBIANBUG: 1123574 CVE-2025-1417...
CVE-2025-1354
A cross-site scripting XSS vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware . This vulnerability caused by improper input validation and can be triggered via the manipulation of the SSID argument in the sysinfo.asp file, leading to disclosure of sensitive information. Note: All versions of...
CVE-2025-1354
A cross-site scripting XSS vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware . This vulnerability caused by improper input validation and can be triggered via the manipulation of the SSID argument in the sysinfo.asp file, leading to disclosure of sensitive information. Note: All versions of...
CVE-2025-1354
CVE-2025-1354 affects Asus RT-N10E/RT-N12E devices running firmware 2.0.0.x. It is a reflected XSS vulnerability triggered by manipulating the SSID parameter in sysinfo.asp, due to improper input validation. This can lead to disclosure of sensitive information. All RT-N10E/RT-N12E versions are EO...
CVE-2019-1354
creationtimestamp| type| source ---|---|--- 2024-03-10 15:16:19+00:00| seen| https://t.me/ctinow/204286...
CVE-2024-1354
creationtimestamp| type| source ---|---|--- 2024-02-13 20:22:12+00:00| seen| https://t.me/ctinow/184137 2024-03-05 01:33:07+00:00| seen| https://t.me/ctinow/199797...
CVE-2024-1354
CVE-2024-1354 describes a command-injection vulnerability in GitHub Enterprise Server where an attacker with editor privileges in the Management Console could escalate to admin SSH access via the syslog-ng configuration. The issue requires access to the GitHub Enterprise Server instance and Manag...
CVE-2024-1354 Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the syslog-ng configuration file. Exploitation of this vulnerability required access to the GitHub...
BELL-CVE-2019-1354 CVE-2019-1354 does not affect BellSoft software
Bulletin has no description...
CVE-2023-1354
creationtimestamp| type| source ---|---|--- 2023-03-11 20:21:51+00:00| seen| https://t.me/cibsecurity/59868...
CVE-2023-1354
The CVE-2023-1354 entry concerns SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. A vulnerability in the register.php functionality allows cross-site scripting via manipulation of the parameters txtfullname, txtage, txtaddress, and txtphone. The issue is e...
Amazon Linux 2 : git (ALAS-2023-1943)
The version of git installed on the remote host is prior to 2.23.1-0. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1943 advisory. A flaw was found in the git fast-import command where it provides the export-marks feature that may unexpectedly overwrite...
[SECURITY] [DSA 5333-1] tiff security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5333-1 [email protected] https://www.debian.org/security/ Aron Xu January 29, 2023 https://www.debian.org/security/faq -...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2867)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2885)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2867)
According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to...