92 matches found
CVE-2022-1997 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
Cross-site Scripting XSS - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0...
CVE-2022-1997
CVE-2022-1997 is a Cross-site Scripting (XSS) vulnerability reported in RosarioSIS prior to version 9.0. The connected sources consistently describe stored XSS in the GitHub repository francoisjacquet/rosariosis and related advisories (Red Hat, OSV, CNVD, CVE lists). The technical details availab...
CVE-2022-1997 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
Cross-site Scripting XSS - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0...
SUSE: Security Advisory (SUSE-SU-2017:0644-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1100-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:1997-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1997
creationtimestamp| type| source ---|---|--- 2021-01-20 18:27:25+00:00| seen| https://t.me/cibsecurity/22346...
CVE-2021-1997
CVE-2021-1997 affects Oracle Hospitality Reporting and Analytics (Oracle Food and Beverage Applications), component: Report, with affected version 9.1.0. The issue is exploitable over HTTP with network access by a low-privilege attacker, leading to unauthorized creation, deletion, or modification...
Palo Alto Networks PAN-OS 7.1.x < 7.1.26 / 8.0.x < 8.0.14 Open Redirection
The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.26 or 8.0.x prior to 8.0.14. It is, therefore, affected by an open redirection vulnerability. - An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacke...
CVE-2020-1997
The CVE-2020-1997 issue is an open redirection in Palo Alto Networks PAN-OS GlobalProtect. Affected products are PAN-OS 7.1.x before 7.1.26 and 8.0.x before 8.0.14. The vulnerability allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway; when a ...
CVE-2018-1997
CVE-2018-1997 affects IBM Business Automation Workflow and IBM BPM versions 18.0.0.0–18.0.0.2 and related BPM/Advanced editions. The root cause is mismanagement of server-side resources, allowing an authenticated attacker to send a crafted request that exhausts memory and causes a denial of servi...
CVE-2019-1997
CVE-2019-1997 affects Android’s random.c: In random_get_bytes, an insecure default value degrades randomness, enabling local information disclosure over an insecure wireless connection with no user interaction. Affected Android versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9. Exploitation context: netwo...
CVE-2019-1997
In randomgetbytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local information disclosure via an insecure wireless connection with no additional execution privileges needed. User interaction is not needed for exploitation...
SUSE SLED12 / SLES12 Security Update : shadow (SUSE-SU-2018:1997-1)
This update for shadow fixes the following issues : - CVE-2016-6252: Incorrect integer handling could results in local privilege escalation bsc1099310 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...
RHEL 7 : libvirt (RHSA-2018:1997)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1997 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...
Security Bulletin: IBM QRadar Vulnerability Manager is vulnerable to a Cross-Site Request Forgery. (CVE-2015-1997)
Summary Cross-Site Request Forgery found in QRadar Vulnerability Manager Vulnerability Details CVE-ID: CVE-2015-1997 Description: IBM QRadar Vulnerability Manager is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user...
legacy.com XSS vulnerability
Vulnerable URL: http://www.legacy.com/?search=%3C/SCript%3E%3CsvG/onLoad=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1997 VIP website status:| Yes...
SUSE SLES11 Security Update : xorg-x11-libX11 (SUSE-SU-2017:0644-1)
This update for xorg-x11-libX11 fixes the following issues : - a regression introduced by the security fix for CVE-2013-1997 bnc824294. Keyboard mappings for special characters on Non-English keyboards might have been broken. bnc1019642 Note that Tenable Network Security has extracted the precedi...
HP Operations Orchestration 10.x < 10.51 Java Object Deserialization RCE
The version of HP Operations Orchestration installed on the remote host is 10.x prior to 10.51. It is, therefore, affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated,...