15 matches found
CVE-2022-42427
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the contact groups configuration page. The issue results from the lack of proper validation of a...
Design/Logic Flaw
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the contact groups configuration page. The issue results from the lack of proper validation of a...
CVE-2022-42427
CVE-2022-42427 affects Centreon. A SQL injection in the contact groups configuration page, due to unvalidated user input used to build SQL queries, allows remote attackers with authentication to escalate privileges to administrator. Root cause: improper validation of a user-supplied string affect...
CVE-2022-42427
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the contact groups configuration page. The issue results from the lack of proper validation of a...
SUSE CVE-2018-18541
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...
CVE-2018-18541
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...
Mageia: Security Advisory (MGASA-2018-0450)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for teeworlds (openSUSE-SU-2019:1793-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-18541
CVE-2019-18541 is rejected and not used; this entry does not represent an active vulnerability.
CVE-2017-18541
The xo-security plugin before 1.5.3 for WordPress has XSS...
CVE-2017-18541
The CVE-2017-18541 entry concerns the WordPress plugin XO Security, specifically versions before 1.5.3, which contain a cross-site scripting (XSS) flaw. Several connected sources (Red Hat, CNVD, NVD, CVE records, and WPvulndb) corroborate that the vulnerability is an XSS in the XO Security WordPr...
openSUSE Security Update : teeworlds (openSUSE-2019-1793)
This update for teeworlds fixes the following issues : - CVE-2019-10879: An integer overflow in CDataFileReader::Open could have lead to a buffer overflow and possibly remote code execution, because size-related multiplications were mishandled. boo1131729 - CVE-2019-10878: A failed bounds check i...
Fedora 27 : teeworlds (2018-b24201fc50)
0.6.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2018-18541
Teeworlds vulnerability CVE-2018-18541 affects versions before 0.6.5, where connection packets could be forged due to lack of a challenge–response during connection setup. A remote attacker could spoof a IP to occupy all server slots or perform reflection attacks using map download packets. The i...