64379 matches found
CVE-2017-20171 PrivateSky apersistence mysqlUtils.js sql injection
A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the file db/sql/mysqlUtils.js. The manipulation leads to sql injection. The identifier of the patch is 954425f61634b556fe644837a592a5b8fcfca068. It is recommended to apply a patch to...
CVE-2017-20171
CVE-2017-20171 affects PrivateSky apersistence, specifically the file db/sql/mysqlUtils.js . The issue is a SQL Injection caused by inadequate input validation in the mysqlUtils.js module, enabling arbitrary SQL execution. Public sources consistently cite this as a critical vulnerability with pat...
Security Bulletin: A vulnerability in IBM Java SDK affects IBM Tivoli System Automation for Multiplatforms (CVE-2017-10356)
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 used by IBM Tivoli System Automation for Multiplatforms. These issues were disclosed as part of the IBM Java SDK updates in Nov 2017. Vulnerability Details CVEID : CVE-2017-10356 DESCRIPTION : An unspecifie...
Security Bulletin: A vulnerability in IBM Java SDK affects IBM Tivoli System Automation Application Manager (CVE-2017-10356)
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 used by IBM Tivoli System Automation Application Manager. IBM Tivoli System Automation Application Manager has addressed the applicable CVEs. These issues were also addressed by WebSphere Application Server...
CVE-2017-20170
creationtimestamp| type| source ---|---|--- 2023-01-17 16:26:31+00:00| seen| https://t.me/cibsecurity/56584...
CVE-2017-20170
A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of the file httpdocs/index.php. The manipulation of the argument s leads to sql injection. The patch is identified as 6891bb2dec57dca6daabc15a6d2808c8896620e5. It is recommended to...
CVE-2017-20170
Summary: CVE-2017-20170 affects ollpu parontalli. A vulnerability exists in the file httpdocs/index.php, where manipulating the parameter s leads to a SQL injection vulnerability. The issue is described as critical and is linked to patch 6891bb2dec57dca6daabc15a6d2808c8896620e5 (VDB-218418). Conn...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715
A flaw was found in hw. The speculative execution window of AMD LFENCE/JMP mitigation MITIGATION V2-2 may be large enough to be exploited on AMD CPUs...
CVE-2017-20167
creationtimestamp| type| source ---|---|--- 2023-01-14 22:37:17+00:00| seen| https://t.me/cibsecurity/56509...
CVE-2017-20167
A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file reports.php. The manipulation of the argument headline leads to cross site scripting. It is possible to initiate the attack remotely. The identifier of the patch is...
CVE-2017-20167 Minichan reports.php cross site scripting
A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file reports.php. The manipulation of the argument headline leads to cross site scripting. It is possible to initiate the attack remotely. The identifier of the patch is...
CVE-2017-20167
CVE-2017-20167 affects Minichan, with a cross-site scripting flaw in an unspecified part of reports.php. Manipulating the headline argument enables remote XSS. A patch is identified by fc0e732e58630cba318d6bf49d1388a7aa9d390e, and the vulnerability is associated with VDB-217785. Connected sources...
CVE-2017-20169
creationtimestamp| type| source ---|---|--- 2023-01-14 00:36:34+00:00| seen| https://t.me/cibsecurity/56499...
CVE-2017-20169 GGGGGGGG ToN-MasterServer svr_request_pub.php sql injection
A vulnerability, which was classified as critical, has been found in GGGGGGGG ToN-MasterServer. Affected by this issue is some unknown functionality of the file publichtml/ircupdater/svrrequestpub.php. The manipulation leads to sql injection. The patch is identified as...
CVE-2017-20169
CVE-2017-20169 affects GGGGGGGG ToN-MasterServer due to a vulnerability in the file public_html/irc_updater/svr_request_pub.php that enables a SQL injection. The issue is described as critical with potential impact on confidentiality, integrity, and availability. The patch identified as 3a4c7e6d5...
CVE-2017-5242
creationtimestamp| type| source ---|---|--- 2023-01-13 00:30:30+00:00| seen| https://t.me/cibsecurity/56451...
CVE-2017-5242
Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots...