109 matches found
CVE-2023-1743
A vulnerability classified as problematic has been found in SourceCodester Grade Point Average GPA Calculator 1.0. This affects an unknown part of the file index.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The exploit h...
CVE-2023-1743
The CVE-2023-1743 entry affects SourceCodester Grade Point Average GPA Calculator 1.0, specifically the index.php file where manipulation of the page parameter enables cross-site scripting (XSS). The vulnerability is exploitable remotely, with public disclosure of an exploit. No patch/version det...
CVE-2022-1743
CVE-2022-1743 describes a path-traversal vulnerability in Dominion Voting Systems ImageCast X. The issue allows manipulation of the device via specially crafted election definition files to achieve arbitrary code execution on ImageCast X devices, potentially spreading malicious code from the EMS ...
CVE-2022-1743 2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24
The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS...
Amazon Linux 2 : vim, --advisory ALAS2-2022-1743 (ALAS-2022-1743)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1743 advisory. vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3903 A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a...
Mageia: Security Advisory (MGASA-2014-0199)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1743
CVE-2021-1743 describes an out-of-bounds read that was mitigated by improved bounds checking. The issue is fixed in Apple platforms: macOS Big Sur 11.2; macOS Security Update 2021-001 for Catalina and Mojave; watchOS 7.3; tvOS 14.4; iOS 14.4; and iPadOS 14.4. Affected action: processing a malicio...
CVE-2021-28210
An unlimited recursion in DxeCore in EDK II...
IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.14 / 9.0.x < 9.0.0.8 Information Disclosure (CVE-2017-1743)
The IBM WebSphere Application Server running on the remote host is version 7.0.0.0 through 7.0.0.45, 8.0.0.0 through 8.0.0.15, 8.5.0.x prior to 8.5.5.14, or 9.0.x prior to 9.0.0.8. It is, therefore, affected by an information disclosure vulnerability that allows a remote, authenticated attacker t...
Security Bulletin: A security vulnerability has been identified in the WebSphere Application Server where the Rational Asset Manager is deployed. (CVE-2017-1743)
Summary In the WebSphere Application Server where the Rational Asset Manager is deployed, a potential information disclosure vulnerability is identified due to improper handling of Administrative Console panel fields. Information about this security vulnerability affecting WebSphere Application...
Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2017-1743)
Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about security vulnerabilities affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...
CVE-2019-17406
Nokia IMPACT 18A has path traversal that may lead to RCE if chained with CVE-2019-1743...
Path traversal
Nokia IMPACT 18A has path traversal that may lead to RCE if chained with CVE-2019-1743...
CVE-2019-17406
Nokia IMPACT 18A has path traversal that may lead to RCE if chained with CVE-2019-1743...
CVE-2019-1743
CVE-2019-1743 describes an arbitrary file upload vulnerability in the web UI framework of Cisco IOS XE Software. An authenticated, remote attacker could exploit improper input validation by uploading a crafted file to the device, potentially gaining elevated privileges and making unauthorized cha...
Security Bulletin: Information Disclosure in WebSphere Application Server (CVE-2017-1743)
Summary There is a potential information disclosure in WebSphere Application Server. Vulnerability Details CVEID: CVE-2017-1743 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel...
Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server in IBM Cloud
Summary There are multiple security vulnerabilities that affect IBM WebSphere Application Server in IBM Cloud. Vulnerability Details CVEID: CVE-2017-1743 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to obtain sensitive information caused by improper handling of...
Security Bulletin: Information Disclosure in WebSphere Application Server shipped with Tivoli Integrated Portal (CVE-2017-1743)
Summary There is a potential information disclosure in WebSphere Application Server. Vulnerability Details CVEID: CVE-2017-1743 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2017-1743)
Summary Using remote browser in Admin console could allow information disclosure with WebSphere Application Server, which is shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. Information about a security vulnerability affecting WebSphere Application Server has been...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Intelligent Operations Center (CVE-2017-1743)
Summary IBM WebSphere Application Server is shipped with IBM Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security bulletin, Security Bulletin:...