111 matches found
Amazon Linux 2 : libplist (ALAS-2023-2067)
The version of libplist installed on the remote host is prior to 1.12-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2067 advisory. A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plistfromxml of the fil...
WordPress WordPress Announcement & Notification Banner Plugin – Bulletin Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software WordPress Announcement & Notification Banner Plugin – Bulletin Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-2067 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership...
Jenkins < 1.551, < 1.532.2 LTS Multiple Vulnerabilities - Linux
Jenkins is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2022-2067)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2067
creationtimestamp| type| source ---|---|--- 2022-06-30 12:57:24+00:00| seen| https://t.me/cibsecurity/44286...
CVE-2022-2067
RosarioSIS (student information system) is affected by CVE-2022-2067 due to a SQL injection vulnerability in versions prior to 9.0. The root cause is lack of validation of externally entered SQL statements, allowing an attacker to execute arbitrary SQL commands and potentially access sensitive da...
CVE-2022-2067 SQL Injection in francoisjacquet/rosariosis
SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0...
CVE-2022-2067 SQL Injection in francoisjacquet/rosariosis
SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0...
Apache Tomcat 6.0.x < 6.0.37 Multiple Vulnerabilities - Linux
Apache Tomcat is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE: Security Advisory (SUSE-SU-2020:2067-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2019:2067-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2067
CVE-2021-2067 affects Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware. Affected versions are 8.5.4 and 8.5.5. The vulnerability permits an unauthenticated attacker with network access over HTTP to read, modify, or delete data and potentially cause partial denial ...
CVE-2021-2067
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1522)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2067
CVE-2019-2067 affects libxaac in Android 10, where a missing bounds check allows an out-of-bounds write leading to remote code execution. Exploitation is network-scoped with user interaction required for exploitation (per CVE details). Root cause: bounds-check omission in libxaac. Affected produc...
CVE-2018-2067
CVE-2018-2067 entry rejected/not used per initial description.
CVE-2017-2067
CVE-2017-2067 is rejected and not used; this ID does not represent an active vulnerability entry.
CVE-2016-2067
drivers/gpu/msm/kgsl.c in the MSM graphics driver aka GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, mishandles the KGSLMEMFLAGSGPUREADONLY flag, which allows attackers to gain privileges by leveraging...