CVE-2022-20271

CVE-2022-20271 affects Android 13, originating in the PermissionController. The issue enables a user-visible misdirection/insufficient UI to grant certain permissions without proper user consent, resulting in potential local elevation of privilege. The vulnerability is categorized as an EoP issue...

CVE-2022-2071

CVE-2022-2071 affects the WordPress Name Directory plugin (versions prior to 1.25.4). The root cause is missing CSRF checks and insufficient sanitisation/escaping in imported data, enabling a logged-in admin to import names containing XSS payloads (stored XSS). Exploitation details in connected s...

openSUSE: Security Advisory for webkit2gtk3 (SUSE-SU-2022:2071-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-2071

CVE-2021-2071 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Elastic Search component, with affected versions 8.56, 8.57, and 8.58. The vulnerability is exploitable over HTTP by an unauthenticated, network-accessing attacker and can lead to takeover of PeopleSoft Enterprise Pe...

CVE-2019-2071

CVE-2019-2071 affects Android 10 via the libxaac library. The issue is an out-of-bounds write caused by a missing bounds check in libxaac, enabling remote code execution with no required privileges and with user interaction needed to exploit. The impact is consistent with a high-severity remote c...

CVE-2018-2071

...

SUSE SLED12 / SLES12 Security Update : util-linux (SUSE-SU-2018:2071-1)

This update for util-linux fixes the following issues : The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

RHEL 7 : Virtualization Manager (RHSA-2018:2071)

An update for org.ovirt.engine-root is now available for Red Hat Virtualization Manager 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2014-2071

Aruba ClearPass Policy Manager (CPPM) versions 6.1.x, 6.2.x prior to 6.2.5.61640, and 6.3.x prior to 6.3.0.61712 are affected. When CPPM is configured to use tunneled and non-tunneled EAP methods within a single policy construct, remote authenticated users can escalate privileges by advertising i...

CVE-2017-2071

CVE-2017-2071 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-2071

...

CVE-2016-2071

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands...

CVE-2016-2071

CVE-2016-2071 affects Citrix NetScaler ADC and NetScaler Gateway. Affected: NetScaler ADC/Gateway 11.x before 11.0 Build 64.34; 10.5 before 10.5 Build 59.13; 10.5.e before Build 59.1305.e. It allows remote attackers to gain privileges via unspecified NS Web GUI commands. Connected documents corro...

CVE-2016-2071

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Multiple Security Updates (CTX206001)

A number of vulnerabilities have been identified in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that could allow a malicious, unprivileged user to perform privileged operations or execute commands. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions mig...

2WIRE Gateway - Authentication Bypass & Password Reset Vulnerabilities

No description provided by source. 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password...

Debian DSA-2897-1 : tomcat7 - security update

Multiple security issues were found in the Tomcat servlet and JSP engine : - CVE-2013-2067 FORM authentication associates the most recent request requiring authentication with the current session. By repeatedly sending a request for an authenticated resource while the victim is completing the log...

[SECURITY] [DSA 2897-1] tomcat7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2897-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 08, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2897-1 (tomcat7 - security update)

Multiple security issues were found in the Tomcat servlet and JSP engine: CVE-2013-2067 FORM authentication associates the most recent request requiring authentication with the current session. By repeatedly sending a request for an authenticated resource while the victim is completing the login...

Debian: Security Advisory (DSA-2897-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...