83 matches found
SUSE: Security Advisory (SUSE-SU-2019:2091-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2017:2091-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2091
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scriptin...
CVE-2021-2091
CVE-2021-2091 affects Oracle E-Business Suite Oracle Scripting (Miscellaneous) and is documented across multiple sources. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The flaw allows an unauthenticated attacker who can reach Oracle Scripting over HTTP to compromise data; attacks may re...
Debian DLA-2091-1 : libjackson-json-java security update
Several vulnerabilities were fixed in libjackson-json-java. CVE-2017-7525 Jackson Deserializer security vulnerability. CVE-2017-15095 Block more JDK types from polymorphic deserialization. CVE-2019-10172 XML external entity vulnerabilities. For Debian 8 'Jessie', these problems have been fixed in...
CVE-2020-2091
CVE-2020-2091 concerns the Jenkins Amazon EC2 Plugin (versions 1.47 and earlier). A missing permission check in form validation allows users with Overall/Read access to connect to an attacker-specified URL in the AWS region using attacker-specified credentials IDs obtained via another method. The...
CVE-2013-2091
CVE-2013-2091 affects Dolibarr ERP/CRM 3.3.1 with a SQL injection via the pays parameter in fiche.php. The root cause is unsanitized input in that parameter, enabling remote attackers to execute arbitrary SQL commands. Documented impact is high/critical depending on CVSS vector, with potential ex...
CVE-2019-2091
In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege, with no additional permissions required. User interaction is not needed for exploitation...
CVE-2019-2091
CVE-2019-2091 affects the Android Framework, specifically GetPermittedAccessibilityServicesForUser in DevicePolicyManagerService.java. The issue is a permissions bypass due to a missing permission check, enabling local elevation of privilege without requiring extra permissions. Exploitation is de...
CVE-2018-2091
CVE-2018-2091 is rejected/not used; this candidate does not represent an active vulnerability entry.
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 is affected by CVE-2017-2091, an access restriction flaw in the Phone Messages function. The issue allows remote authenticated attackers to bypass access restrictions and alter the status of phone messages via unspecified vectors. Affected component: Phone Messages fe...
hotwire.com XSS vulnerability
Vulnerable URL: https://www.hotwire.com/p/info-other/feedback.htm?prev=null%22%20onmouseenter%3D%22alert %28/OPENBUGBOUNTY/%29%22%20resT=%22 Details: Description| Value ---|--- Patched:| Yes, at 20.09.2016 Latest check for patch:| 20.09.2016 09:21 GMT Vulnerability type:| XSS Vulnerability status...
Fedora 24 : libdwarf (2016-f36c5935e5)
Update to 20160507 release - fixes many outstanding crash bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Gentoo Security Advisory GLSA 201603-12
Gentoo Linux Local Security Checks SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.121454";...
CVE-2016-2091
The dwarfreadciefdeprefix function in dwarfframe2.c in libdwarf 20151114 allows attackers to cause a denial of service out-of-bounds read via a crafted ELF object file...
CVE-2016-2091
The CVE-2016-2091 vulnerability affects libdwarf, specifically the dwarf_read_cie_fde_prefix function in dwarf_frame2.c. A crafted ELF object file can trigger a denial of service via an out-of-bounds read. Public disclosures in connected sources confirm this issue within libdwarf and note multipl...
