84 matches found
CVE-2023-2064 SQLi in Minova Technology's eTrace
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Minova Technology eTrace allows SQL Injection. This issue affects eTrace: before 23.05.20...
CVE-2023-2064
CVE-2023-2064 targets Minova Technology eTrace via an SQL Injection due to improper neutralization of special elements. Affected: eTrace versions before 23.05.20. Impact per sources indicates high confidentiality, integrity, and availability risk. Remediation: update to 23.05.20 or later (as note...
SUSE CVE-2013-2064
Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the readpacket function...
SUSE CVE-2014-2064
The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts...
CVE-2020-2064
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2022-2064
Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2064 Insufficient Session Expiration in nocodb/nocodb
Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2064
CVE-2022-2064 affects nocodb/nocodb before version 0.91.7+. The root cause is insufficient session expiration, leading to continued active sessions after password changes or during login transitions. Multiple sources (Red Hat, OSV, GHSA) align on the same vulnerability class, with references to a...
ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +923 more potentially affected by CVE-2014-2064 via org.jenkins-ci.main:jenkins-core (>=1.396 <=1.532.1.JENKINS-19453)
org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =0.0.1, =0.9, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =2.0.6 - com.cisco.step.jenkins.plugins:jenkow-parent =0.1 and more Source cves: CVE-2014-2064 Source advisory: OSV:GHSA-9VG9-X38G-9HFX...
com.antelink.reporter.jenkins.plugin:AntepediaReporter-CI-plugin (>=1.7 <=1.8), com.dubture.jenkins:digitalocean-plugin (>=0.1 <=0.2) +39 more potentially affected by CVE-2014-2064 via org.jenkins-ci.main:jenkins-core (>=1.533 <=1.550)
org.jenkins-ci.main:jenkins-core MAVEN version =1.533, =1.7, =0.1, =1.53, =1.0.0, =0.1, =1.533, =1.533, =1.533, =1.533, =0.1.3, =0.1.5 and more Source cves: CVE-2014-2064 Source advisory: OSV:GHSA-9VG9-X38G-9HFX...
RPCBind 0.2.0 Multiple Vulnerabilities
RPCBind is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE: Security Advisory (SUSE-SU-2014:0916-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2064
creationtimestamp| type| source ---|---|--- 2021-01-20 18:43:33+00:00| seen| https://t.me/cibsecurity/22416...
CVE-2021-2064
CVE-2021-2064 is a vulnerability in Oracle WebLogic Server (Fusion Middleware Core Components) affecting the 12.1.3.0.0 line. The connected Red Hat and CVE databases confirm an unauthenticated attacker can access via network protocols IIOP/T3 to compromise the server, potentially enabling full ta...
RHEL 6 : chromium-browser (RHSA-2020:2064)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2064 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 81.0.4044.138. Security Fixes:...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1535)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-2064
rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr...
CVE-2010-2064
CVE-2010-2064 affects rpcbind 0.2.0; local attackers can write to arbitrary files or gain privileges via a symlink attack on /tmp/portmap.xdr and /tmp/rpcbind.xdr. Root cause: incorrect handling of symbolic links in temporary files leads to privilege/escalation risk. Exploitation details are not ...
CVE-2019-2064
In Android 10, CVE-2019-2064 is a vulnerability in the libxaac library where a missing bounds check enables an out-of-bounds write, potentially enabling remote code execution. The issue affects Android-10 devices using libxaac and is documented across multiple sources (NVD entry; Red Hat and CNVD...