Amazon Linux 2 : golang (ALAS-2023-2052)

The version of golang installed on the remote host is prior to 1.18.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2052 advisory. html/template: improper sanitization of CSS values Angle brackets were not considered dangerous characters when inserted into CSS...

CVE-2023-2052

creationtimestamp| type| source ---|---|--- 2023-04-14 16:25:47+00:00| seen| https://t.me/cibsecurity/62124...

CVE-2023-2052 Campcodes Advanced Online Voting System ballot_down.php sql injection

A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ballotdown.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The explo...

CVE-2023-2052

CVE-2023-2052 affects Campcodes Advanced Online Voting System 1.0; the vulnerability is an SQL injection in /admin/ballot_down.php via the id parameter. Exploitation is remote and the exploit has been publicly disclosed. Public CVSS data indicate a HIGH impact on confidentiality, integrity, and a...

SUSE CVE-2016-2052

Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc,...

CVE-2020-2052

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

CVE-2022-2052 TRUMPF TruTops default user accounts vulnerability

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system...

CVE-2022-2052

The CVE-2022-2052 entry concerns Trumpf products (e.g., TruTops, Job Order Interface, Oseon, TruTops Boost/Fab/Monitor) that rely on default privileged Windows users and passwords. The underlying issue is use of default credentials, which could allow an attacker to remotely gain full access to af...

SUSE SLES12 Security Update : u-boot (SUSE-SU-2022:2052-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2052-1 advisory. - Das U-Boot 2022.01 has a Buffer Overflow. CVE-2022-30552 - nfslookupreply in net/nfs.c in Das U-Boot through 2022.04 and through...

Mageia: Security Advisory (MGASA-2019-0154)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2052

CVE-2021-2052 affects Oracle JD Edwards EnterpriseOne Orchestrator (E1 IOT Orchestrator Security). Affected versions are prior to 9.2.5.1. The impact described across sources is unauthenticated, network-accessible read access to a subset of data via HTTP. The vulnerability is tied to the JD Edwar...

CVE-2021-2052

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. The supported version that is affected is Prior to 9.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...

CVE-2021-2052

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. The supported version that is affected is Prior to 9.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...

Session fixation

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...

CVE-2019-12001

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...

CVE-2014-2052

CVE-2014-2052 affects Zend Framework used by ownCloud Server. The vulnerability is triggered by an XML External Entity (XXE) attack in Zend Framework that can allow a remote attacker to read arbitrary files, cause a denial of service, and potentially other impacts. Affected products/versions are ...

CVE-2014-2052

Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2019-2052)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2052-1 : libbsd security update

An issues has been found in libbsd, a package containing utility functions from BSD systems. In function fgetwln an off-by-one error could triggers a heap buffer overflow. For Debian 8 'Jessie', this problem has been fixed in version 0.7.0-2+deb8u1. We recommend that you upgrade your libbsd...

CVE-2019-2052

CVE-2019-2052 : In VisitPointers of heap.cc, Android’s System component, there is a potential out-of-bounds read caused by type confusion. This could enable remote information disclosure without extra execution privileges or user interaction. Affected Android versions include 7.0, 7.1.1, 7.1.2, 8...