CVE-2023-1850

SourceCodester Online Payroll System 1.0 contains a SQL injection in /admin/login.php triggered by manipulating the username parameter. The vulnerability is exploitable remotely and affects unknown functionality of the login page, with potential high impact to confidentiality, integrity, and avai...

CVE-2022-37934

A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series...

Hewlett Packard Enterprise OfficeConnect 路径遍历漏洞

Hewlett Packard Enterprise OfficeConnect is a series of switches from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise OfficeConnect. An attacker could exploit the vulnerability to read arbitrary files on the server running the application. The followi...

Vulnerability fixed in HP OfficeConnect 1820 and 1850 switches

HPO has fixed a vulnerability in the firmware of its OfficeConnect 1820 and 1850 switches. An unauthenticated malicious party could, by exploiting the vulnerability, perform a directory traversal and thereby gain access to system data. This data could potentially be used to setting up further...

HPESBNW04401 rev.1 - HPE OfficeConnect 1820, and 1850 Switch Series, Remote Directory Traversal

Potential Security Impact: Remote: Directory Traversal SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OfficeConnect 1820 8G Switch J9979A - Prior to PT.02.17 HPE OfficeConnect 1820 8G PoE+ 65W Switch J9982A - Prior to PT.02.17 HPE OfficeConnect 1820 24G Switch J9980A - Prior ...

CVE-2022-37932

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in...

CVE-2022-37932

HP OfficeConnect switches (1820, 1850, 1920S) are affected by CVE-2022-37932, with an authentication bypass vulnerability in the login flow. The issue exists in the web/HTTP login handling where the default password can be changed without prior authentication, enabling an unauthenticated attacker...

PT-2022-24164 · Hewlett Packard · Officeconnect 1920S +2

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise OfficeConnect 1820 versions prior to PT.02.14 Hewlett Packard Enterprise OfficeConnect 1850 versions prior to PC.01.22 Hewlett Packard Enterprise OfficeConnect 1920S versions prior to PO.01.21 Hewlett Packard...

HPESBNW04383 rev.1 - Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches, Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OfficeConnect 1820 8G Switch J9979A - Prior to PT.02.14 HPE OfficeConnect 1820 8G PoE+ 65W Switch J9982A - Prior to PT.02.14 HPE OfficeConnect 1820 24G Switch J9980A - Prio...

Amazon Linux 2 : aide (ALAS-2022-1850)

The version of aide installed on the remote host is prior to 0.16.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1850 advisory. A heap-based buffer overflow vulnerability in the base64 functions of AIDE, an advanced intrusion detection system. An attacker could...

Ubuntu: Security Advisory (USN-162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-1850

creationtimestamp| type| source ---|---|--- 2022-05-24 18:36:58+00:00| seen| https://t.me/cibsecurity/43254...

CVE-2022-1850

CVE-2022-1850 affects filegator/filegator prior to 7.8.0. A path traversal vulnerability exists due to insufficient sanitization in the joinPaths logic, allowing non-admin users to create or reference files outside the intended scope (e.g., using ..\ in names) and potentially modify or manage fil...

CVE-2015-1850

CVE-2015-1850 entry is rejected and not an active vulnerability; do not use this candidate number.

ekspertai.eu Cross Site Scripting vulnerability

Security Researcher amlnspqr Helped patch 1850 vulnerabilities Received 7 Coordinated Disclosure badges Received 36 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting ekspertai.eu website and its users. Following coordinated...

CVE-2014-1850

CVE-2014-1850 is rejected; reference CVE-2014-3743 as the valid entry.

CVE-2019-1850 Cisco Integrated Management Controller Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on an affected device. An attacker would need to have valid administrator...

CVE-2019-1850

Cisco IMC Command Injection (CVE-2019-1850) affects the web-based management interface of Cisco Integrated Management Controller. An authenticated administrator can inject and execute arbitrary system-level commands with root privileges by sending crafted input via the administrative web interfac...

Fedora Update for firefox FEDORA-2019-a0ccc78064

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-1850

CVE-2018-1850 affects IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0, and 9.0.5.0. When Advanced Access Control services are running, it could allow unauthorized administration operations. The root cause is within the Advanced Access Control service enabling admin actions without proper a...