78 matches found
EUVD-2022-55998
An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors...
CVE-2026-2081
A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/setpassword. This manipulation of the argument httppasswd causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclos...
CVE-2024-2081
The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the foogalleryattachmentmodalsave action in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2006-1870
Malware in sbrugna...
CVE-2019-2081
In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116473261...
CVE-2025-2081
creationtimestamp| type| source ---|---|--- 2025-03-11 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02 2025-03-13 19:48:08+00:00| seen| https://t.me/cvedetector/20234...
CVE-2022-2081
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to...
CentOS 7 : python-virtualenv (RHSA-2020:2081)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2081 advisory. - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect...
Oracle DB SQL Injection Via DBMS_EXPORT_EXTENSION
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB SQL Injection via DBMSEXPORTEXTENSION', 'Description' = %q This module will escalate an Oracle DB user to DBA by exploiting a sql...
EulerOS 2.0 SP11 : git (EulerOS-SA-2024-2081)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be...
CVE-2024-2081
The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the foogalleryattachmentmodalsave action in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2024-2081
CVE-2024-2081 affects the FooGallery WordPress plugin (Best WordPress Gallery Plugin – FooGallery) up to version 2.4.14. The issue is a Stored Cross-Site Scripting vulnerability via the foogallery_attachment_modal_save action caused by insufficient input sanitization and output escaping. Exploita...
CVE-2022-2081
creationtimestamp| type| source ---|---|--- 2024-01-04 11:31:19+00:00| seen| https://t.me/ctinow/162906 2024-01-05 01:32:35+00:00| seen| https://t.me/cibsecurity/74398 2024-01-07 01:26:02+00:00| seen| https://t.me/arpsyndicate/2599...
CVE-2022-2081
CVE-2022-2081 affects Hitachi Energy RTU500 CMU firmware via the HCI Modbus TCP function. A lack of flood control allows remote, high-rate Modbus TCP packets to cause a stack overflow and reboot the CMU when HCI Modbus TCP is enabled. Affected products span multiple RTU500 firmware lines (e.g., 1...
Rocky Linux 8 : bluez (RLSA-2022:2081)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:2081 advisory. - BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdpcstateallocbuf which allocates memory which will always be hun...
SUSE CVE-2021-2081
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
Oracle Linux 7 : python-virtualenv (ELSA-2020-2081)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2081 advisory. - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect...
Amazon Linux 2 : squid (ALAS-2023-2081)
The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2081 advisory. An issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap-based buffer overflow. When receivi...
CentOS 8 : bluez (CESA-2022:2081)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2081 advisory. - bluez: memory leak in the SDP protocol CVE-2021-41229 Note that Nessus has not tested for this issue but has instead relied only on the application's...
mysql:8.0 security, bug fix, and enhancement update
An update is available for mecab-ipadic, mecab, mysql. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user, multi-threaded SQL database server...