ECHO-7903-2043-8947

Bulletin has no description...

CVE-2026-2043

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-072/ 2026-02-24 14:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmeev27st2w 2026-02-24 18:14:10+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2016-2043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the goToFinish1NF function in js/normalization.js in phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows...

CVE-2025-2043 LinZhaoguan pb-cms Add New Topic admin#themes deserialization

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /adminthemes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The attack may be initiated remotely...

CVE-2025-2043 LinZhaoguan pb-cms Add New Topic admin#themes deserialization

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /adminthemes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The attack may be initiated remotely...

SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2024:2043-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2043-1 advisory. - Update to version 2.44.2 - CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may b...

CVE-2024-2043

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when downloading form submissions in all versions up to, and including, 2.9.9.7. This makes it possible for unauthenticated...

CVE-2024-2043

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when downloading form submissions in all versions up to, and including, 2.9.9.7. This makes it possible for unauthenticated...

CVE-2024-2043

The CVE CVE-2024-2043 concerns the EleForms – All In One Form Integration including DB for Elementor WordPress plugin. A missing capability check when downloading form submissions allows unauthenticated users to view submissions in all versions up to and including 2.9.9.7. Root cause: absent auth...

akmoenter.dk Cross Site Scripting vulnerability OBB-3333702

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-2043

CVE-2023-2043 affects Control iD RHiD 23.3.19.0, specifically the Edit Handler’s file path /v2/customerdb/operator.svc/a. The vulnerability arises from manipulating the email argument, leading to SQL injection, with remote attack possible. Public details confirm the issue but do not provide a fix...

CVE-2023-2043 Control iD RHiD Edit a sql injection

A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack...

CVE-2022-2043

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive...

CVE-2022-2043 MOXA NPort 5110 Out-of-bounds Write

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive...

CVE-2022-2043

CVE-2022-2043 affects MOXA NPort 5110 device server with firmware version 2.10. Root cause: an out-of-bounds write (CWE-787) that can cause the device to become unresponsive. Impact: potential denial of service via a remote, network-accessible vector (CVSS v3 base score 7.5, HIGH). Remediation: u...

CVE-2022-2043 MOXA NPort 5110 Out-of-bounds Write

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive...

CVE-2022-2043

creationtimestamp| type| source ---|---|--- 2022-07-29 12:40:05+00:00| published-proof-of-concept| https://t.me/truesecator/3232 2022-07-30 19:05:37+00:00| published-proof-of-concept| https://t.me/icscert/573 2022-08-31 20:37:21+00:00| seen| https://t.me/cibsecurity/49127...

MOXA NPort 5110

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: MOXA Equipment: NPort 5110 Vulnerabilities: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to change memory values and/or cause the...

Oracle Linux 8 : c-ares (ELSA-2022-2043)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-2043 advisory. 1.13.0-6 - Resolves: rhbz1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking rhel-8 Tenable has extracted the...

Rocky Linux 8 : c-ares (RLSA-2022:2043)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:2043 advisory. - A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong...