Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-1118)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-25072

creationtimestamp| type| source ---|---|--- 2023-01-08 16:26:40+00:00| seen| https://t.me/cibsecurity/56136...

CVE-2018-25072 lojban jbovlaste listing.html sql injection

A vulnerability classified as critical has been found in lojban jbovlaste. This affects an unknown part of the file dict/listing.html. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The patch is named 6ff44c2e87b1113eb07d76ea62e1f64193b04d15. It is...

CVE-2018-25072

CVE-2018-25072 affects lojban jbovlaste. The vulnerability exists in an unknown part of dict/listing.html and allows remote SQL injection due to improper handling of input. It is classified as critical. A patch is available: 6ff44c2e87b1113eb07d76ea62e1f64193b04d15, and applying it is recommended...

CVE-2018-25069

creationtimestamp| type| source ---|---|--- 2023-01-07 12:25:41+00:00| seen| https://t.me/cibsecurity/56109...

CVE-2018-25071

CVE-2018-25071 affects roxlukas LMeve up to 0.1.58. The vulnerability is in the function insert_log of wwwroot/ccpwgl/proxy.php, where manipulation of the fetch parameter enables SQL injection. The issue is mitigated by upgrading to version 0.1.59-beta (patch identified as c25ff7fe83a2cda1fcb365b...

CVE-2018-25070

CVE-2018-25070 affects polterguy Phosphorus Five up to 8.2. The vulnerability is in the CSV Import component, specifically the function csv.Read in plugins/extras/p5.mysql/NonQuery.cs, which leads to a SQL injection. Upgrading to version 8.3 addresses the issue (patch: c179a3d0703db55cfe0cb939b89...

CVE-2018-25069

A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability...

CVE-2018-25069

Netis Netcore Router is affected by CVE-2018-25069, a vulnerability described as a critical issue involving hard-coded credentials. The available connected documents confirm the flaw enables remote initiation and relates to Netcore Router products, with the root cause stated as hard-coded passwor...

CVE-2018-25069 Netis Netcore Router hard-coded password

A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability...

CVE-2018-25067

creationtimestamp| type| source ---|---|--- 2023-01-07 00:24:31+00:00| seen| https://t.me/cibsecurity/56078...

CVE-2018-25068

creationtimestamp| type| source ---|---|--- 2023-01-07 00:24:29+00:00| seen| https://t.me/cibsecurity/56076...

Debian dla-3262 : smarty3 - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3262 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3262-1 [email protected] https://www.debian.org/lts/security/...

CVE-2018-25068

A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The...

CVE-2018-25068 devent globalpom-utils FileResourceManagerProvider.java createTmpDir temp file

A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The...

CVE-2018-25068

The CVE-2018-25068 case affects devent globalpom-utils up to v4.5.0, where the createTmpDir function in FileResourceManagerProvider.java can create insecure temporary files. The vulnerability, exploitable remotely, is addressed by upgrading to v4.5.1 (patch: 77a820bac2f68e662ce261ecb050c643bd7ee5...

CVE-2018-25067

CVE-2018-25067 affects JoomGallery up to 3.3.3. The SQL injection vulnerability is in the Image Sort Handler, specifically in administrator/components/com_joomgallery/views/config/tmpl/default.php. Upgrading to 3.3.4 mitigates the issue (patch DC414EE954E849082260F8613E15A1C1E1D354A1; VDB-217569).

CVE-2018-25067 JoomGallery Image Sort default.php sql injection

A vulnerability, which was classified as critical, was found in JoomGallery up to 3.3.3. This affects an unknown part of the file administrator/components/comjoomgallery/views/config/tmpl/default.php of the component Image Sort Handler. The manipulation leads to sql injection. Upgrading to versio...

CVE-2018-25066

A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. ...

CVE-2018-25066

CVE-2018-25066 affects PeterMu’s nodebatis up to version 2.1.x, with a reported SQL injection caused by an unspecified function/feature. Multiple sources (Red Hat, GHSA, OSV/NVD mirrors) confirm the vulnerability and the recommended fix: upgrade to version 2.2.0. The patch is identified by the ha...