119 matches found
CVE-2023-2059
creationtimestamp| type| source ---|---|--- 2023-04-14 18:26:08+00:00| seen| https://t.me/cibsecurity/62160...
CVE-2023-2059 DedeCMS select_templets.php path traversal
A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/selecttemplets.php. The manipulation leads to path traversal: '..\filedir'. The attack may be launched remotely. The exploit has...
CVE-2023-2059
CVE-2023-2059 affects DedeCMS 5.7.87. A directory-traversal vulnerability exists in the file uploads/include/dialog/select_templets.php, exploitable via the $activepath parameter to read sensitive files. The Nuclei template confirms remote exploitation potential and provides an remediation path: ...
Jenkins < 1.551, < 1.532.2 LTS Multiple Vulnerabilities - Linux
Jenkins is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-2059
creationtimestamp| type| source ---|---|--- 2022-07-25 22:33:20+00:00| seen| https://t.me/cibsecurity/46952...
CVE-2022-2059 Stored Cross Site-Scripting in Agent Manager
In Pandora FMS v7.0NG.761 and below, in the agent creation section, the alias parameter is vulnerable to a Stored Cross Site-Scripting. This vulnerability can be exploited by an attacker with administrator privileges logged in the system...
CVE-2022-2059
CVE-2022-2059 is a Stored Cross Site-Scripting in Pandora FMS v7.0NG.761 and earlier, in the agent creation section where the alias parameter is vulnerable. An attacker with administrator privileges logged in to the system can exploit this vulnerability. The PT-Security entry confirms the issue a...
Advisory ROSA-SA-2021-1873
Software: libidn 1.28 OS: Cobalt 7.9 CVE-ID: CVE-2015-2059 CVE-Crit: MEDIUM CVE-DESC: The stringpreputf8toucs4 function in libin prior to 1.31, used in jabberd2, allows context-sensitive attackers to read system memory and possibly exert other undefined influence via invalid UTF-8 characters in a...
SUSE: Security Advisory (SUSE-SU-2016:2079-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2059
creationtimestamp| type| source ---|---|--- 2021-01-20 18:40:34+00:00| seen| https://t.me/cibsecurity/22401...
CVE-2021-2059
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Web interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...
CVE-2021-2059
Summary of CVE-2021-2059 : A vulnerability in Oracle iStore (Web interface) within Oracle E-Business Suite affects versions 12.1.1–12.1.3 and 12.2.3–12.2.10. It allows an unauthenticated, network-accessible attacker over HTTP to read a subset of Oracle iStore data. CVSS v3.1 base score is 5.3 (Co...
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 7 (RHSA-2020:2059)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2059 advisory. This release of Red Hat JBoss Enterprise Application Platform 7.2.8 serves as a replacement for Red Hat JBoss Enterprise Application Platfor...
Huawei EulerOS: Security Advisory for libidn (EulerOS-SA-2019-1454)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2059
CVE-2019-2059 affects Android 10 in the libxaac library, where a missing bounds check can cause an out-of-bounds write. This vulnerability could enable remote code execution with user interaction required. The issue is documented across multiple sources (e.g., NVD and Red Hat advisories) with And...
CVE-2018-2059
CVE-2018-2059 is rejected and does not represent an active vulnerability entry.
CVE-2017-2059
CVE-2017-2059 is rejected and not used; it does not represent an active vulnerability entry.
USN-3068-1 Libidn vulnerabilities | Cloud Foundry
USN-3068-1 Libidn vulnerabilities Medium Vendor Canonical Ubuntu, libidn Versions Affected Canonical Ubuntu 14.04 LTS Description Thijs Alkemade, Gustavo Grieco, Daniel Stenberg, and Nikos Mavrogiannopoulos discovered that Libidn incorrectly handled invalid UTF-8 characters. A remote attacker cou...