84 matches found
CVE-2023-2087 Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save
The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.6. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to change plugin settings via a forged...
CVE-2023-2087 Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save
The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.6. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to change plugin settings via a forged...
CVE-2023-2087
CVE-2023-2087 affects the WordPress Essential Blocks plugin (versions
CVE-2022-2087
creationtimestamp| type| source ---|---|--- 2022-06-15 16:20:21+00:00| seen| https://t.me/cibsecurity/44494...
CVE-2022-2087
CVE-2022-2087 affects SourceCodester Bank Management System 1.0. The vulnerability exists in the /mnotice.php?id=2 parameter where manipulating the notice argument with typical payloads (e.g., ) results in Cross-Site Scripting. It is exploitable remotely, and public exploits have been disclosed. ...
SUSE: Security Advisory (SUSE-SU-2018:2087-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2087
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server...
Oracle MySQL Server 8.0 <= 8.0.22 Security Update (cpujan2021) - Windows
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
CVE-2021-2087 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2087
CVE-2021-2087 refers to a vulnerability in Oracle MySQL Server (Server: DML) affecting 8.0.22 and earlier. A high-privilege user with server access could cause a denial-of-service (hang or crash). Connected sources indicate remediation exists via upgrading MySQL (e.g., the CG/Mariner entry for my...
CVE-2020-2087
CVE-2020-2087 is rejected and not associated with any vulnerability.
CVE-2012-2087
CVE-2012-2087 affects ISPConfig 3.0.4.3: the issue in the WebDAV user creation flow allows a user to chmod and chown the entire server from the client interface. This is documented in multiple sources (NVD, Red Hat, CVE lists). The connected documents do not specify a patch or remediation version...
CVE-2019-2087
CVE-2019-2087 affects Android 10 libxaac. Root cause: out-of-bounds write from a missing bounds check, enabling remote code execution with no privileges and requiring user interaction. Mitigation: apply patches as part of Android 10 updates; devices with a security patch level of 2019-09-01 or la...
SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2019:2087-1)
This update for tcpdump fixes the following issues : Security issues fixed : CVE-2019-1010220: Fixed a buffer over-read in printprefix which may expose data bsc1142439. CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716. Note that Tenable Network...
CVE-2018-2087
This CVE entry CVE-2018-2087 is rejected/not used as stated in the description.
