74 matches found
WordPress WordPress Announcement & Notification Banner Plugin – Bulletin Plugin <= 3.6.0 is vulnerable to Broken Access Control
Software WordPress Announcement & Notification Banner Plugin – Bulletin Type Plugin Vulnerable versions = 3.6.0 Fixed in 3.7.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-2066 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSI...
Ubuntu: Security Advisory (USN-1074-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2066
creationtimestamp| type| source ---|---|--- 2022-06-13 16:23:00+00:00| seen| https://t.me/cibsecurity/44288...
CVE-2022-2066
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066
CVE-2022-2066 corresponds to a Cross-site Scripting (XSS) vulnerability that is reflected in the FacturaScripts project (neorazorx/facturascripts) prior to 2022.06. The vulnerability affects the client side, allowing an attacker to inject JavaScript into rendered pages. Multiple records (NVD, Red...
SUSE: Security Advisory (SUSE-SU-2013:1104-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1104-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:0882-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2066
creationtimestamp| type| source ---|---|--- 2021-01-20 18:33:28+00:00| seen| https://t.me/cibsecurity/22361...
CVE-2021-2066
CVE-2021-2066 affects the Oracle Outside In Technology product (Outside In Filters) used within Oracle Fusion Middleware. Affected versions are 8.5.4 and 8.5.5. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Outside In Technology component, pot...
CVE-2019-2066
CVE-2019-2066 is an out-of-bounds write in libxaac on Android 10 that can lead to remote code execution. The vulnerability arises from a missing bounds check in libxaac, with exploitation requiring user interaction. Affected components: libxaac within Android 10. Reported impact includes remote c...
SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2019:2066-1)
This update for python-Twisted fixes the following issue : Security issue fixed : CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. Note that Tenable Network Security has extracted the preceding description block...
CVE-2018-2066
CVE-2018-2066 entry is rejected/not used; this ID does not represent an active vulnerability.
CVE-2017-2066
CVE-2017-2066 is tied to BlazeDS in Adobe ColdFusion, where a Java deserialization issue in BlazeDS could lead to remote code execution. ThreatPost reports that updating to BlazeDS 4.7.3 mitigates this risk, as part of a ColdFusion hotfix. The connected document confirms the vulnerability resides...
ColdFusion Hotfix Resolves XSS, Java Deserialization Bugs
Adobe today released an important security hotfix for several versions of its ColdFusion rapid web application development platform. The company said the update addresses an input validation vulnerability CVE-2017-3008 in the software that could be used in reflected cross-site scripting XSS...
CVE-2016-2066
Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service memory corruption via a crafted application that...