35960 matches found
Huawei EulerOS: Security Advisory for python2 (EulerOS-SA-2023-2214)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2023-2229)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mazda cars 安全漏洞
Mazda cars is a line of automobiles from the Japanese company Mazda Mazda. Mazda cars 2015-2016 suffers from a security vulnerability that stems from allowing unlocking via an unspecified method...
web.ff.cuni.cz Cross Site Scripting vulnerability OBB-3407212
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
OESA-2023-1336 cpio security update
GNU cpio copies files into or out of a cpio or tar archive.The archive can be another file on the disk, a magnetic tape, or a pipe. Security Fixes: cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an...
CVE-2023-32219
A Mazda model 2015-2016 can be unlocked via an unspecified method...
Medium: pcre
Issue Overview: Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular...
FreeBSD : Gitlab -- Vulnerability (cdb5338d-04ec-11ee-9c88-001b217b3468)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cdb5338d-04ec-11ee-9c88-001b217b3468 advisory. - A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8,...
CVE-2023-2015
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.8 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A reflected XSS was possible when creating new abuse reports which allows attackers to perform...
CVE-2023-2015
CVE-2023-2015 concerns GitLab CE/EE with a reflected XSS in abuse report creation, affecting all versions from 15.8 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2. The root cause and impact are described in the provided documents, which state that an attacker could perform arbitrary...
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2023-2103)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-10117
The CVE-2015-10117 entry concerns Gravity Forms DPS PxPay Plugin for WordPress, affected in versions up to 1.4.2. The vulnerability is a cross-site scripting flaw due to an unknown function, enabling remote execution of an attack. Remediation is upgrading to version 1.4.3, with patch identifier 5...
CVE-2015-10117 Gravity Forms DPS PxPay Plugin cross site scripting
A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.4.3 is able to address...
CVE-2015-10116
RealFaviconGenerator Favicon Plugin for WordPress (up to version 1.2.12) is affected. The vulnerability resides in install_new_favicon (admin/class-favicon-by-realfavicongenerator-admin.php), enabling cross-site request forgery (CSRF). Exploitation can be remotely initiated. A patch is available ...
CVE-2015-10113
creationtimestamp| type| source ---|---|--- 2023-06-05 20:28:38+00:00| seen| Telegram/m2vA5vwXgtjEoPUMgGnXm3wgyGCPKNN2UsNIsbMGegsjE4...
CVE-2015-10115
CVE-2015-10115 affects WooSidebars Sidebar Manager Converter Plugin for WordPress up to version 1.1.1, specifically the process_request function in classes/class-woosidebars-sbm-converter.php. The vulnerability allows an open redirect and can be triggered remotely. The issue is fixed by upgrading...
CVE-2015-3035
creationtimestamp| type| source ---|---|--- 2023-06-05 16:20:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/tplinkarcherc7traversal.rb 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 13:14:49+00:00| seen|...
CVE-2015-10114
The CVE-2015-10114 entry describes a vulnerability in the WordPress WooSidebars plugin (versions up to 1.4.1) affecting the function enable_custom_post_sidebars in classes/class-woo-sidebars.php. The issue arises from manipulation of the sendback parameter, causing an open redirect. This could be...
CVE-2015-10113
Summary: CVE-2015-10113 affects the WordPress WooFramework Tweaks Plugin (up to v1.0.1). The vulnerability lies in the admin_screen_logic function where manipulation of the url argument enables an open redirect. The issue can be exploited remotely. A fix is available in version 1.0.2, with patch ...