RHEL 8 : bind (RHSA-2022:2092)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:2092 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C Tenable, Inc...

SUSE: Security Advisory (SUSE-SU-2017:2092-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2092

creationtimestamp| type| source ---|---|--- 2021-01-20 18:27:13+00:00| seen| https://t.me/cibsecurity/22335...

CVE-2021-2092

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CR...

CVE-2021-2092

CVE-2021-2092 affects Oracle E-Business Suite – Oracle CRM Technical Foundation (component: Preferences) in versions 12.1.3 and 12.2.3–12.2.10. The Red Hat and NVD records describe an unauthenticated, network-accessible HTTP vulnerability that can lead to unauthorized data access and data manipul...

CVE-2020-2092

CVE-2020-2092 affects Jenkins Robot Framework Plugin (versions ≤ 2.0.0). The issue is that the XML parser is not configured to prevent XML External Entity (XXE) attacks, enabling users with Job/Configure to submit crafted XML documents that may expose secrets, enable SSRF, or cause denial of serv...

CVE-2012-2092

creationtimestamp| type| source ---|---|--- 2019-12-06 20:48:10+00:00| seen| https://t.me/cibsecurity/8555 2024-03-07 21:12:08+00:00| seen| https://t.me/ctinow/202772...

CVE-2013-2092

Cross-site Scripting XSS in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php...

CVE-2013-2092

CVE-2013-2092: Dolibarr ERP/CRM 3.3.1 contains a Cross‑Site Scripting (XSS) in functions.lib.php that allows remote attackers to inject arbitrary web script or HTML. Root cause is a lack of input sanitization in that library file. Impact per sources is limited to XSS on affected pages; exploitati...

CVE-2019-2092

CVE-2019-2092 affects the Android Framework, specifically DevicePolicyManagerService.java’s isSeparateProfileChallengeAllowed, where a missing permission check enables local elevation of privilege. Impact is local EoP with no extra privileges required, no user interaction needed. Affected version...

CVE-2018-2092

This CVE-2018-2092 entry is rejected/not used; the candidate was not assigned to any issues.

CVE-2018-2092

...

CVE-2017-2092

Cybozu Garoon 3.0.0–4.2.3 is affected by CVE-2017-2092 (Cross-site scripting). The vulnerability, in Cybozu Garoon and addressed across connected sources, allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling arbitrary script ex...

CVE-2015-2092

The CVE-2015-2092 entry concerns Agilent Technologies Feature Extraction, specifically the AnnotationX.AnnList.1 ActiveX control. The vulnerability allows remote code execution via a crafted object parameter in the Insert function, related to an index-out-of-bounds condition. Public documentation...

CVE-2014-2092

CMS Made Simple 1.11.10 is affected by a cross-site scripting (XSS) vulnerability in lib/filemanager/ImageManager/editorFrame.php, exploitable via the action parameter. This CVE-2014-2092 entry describes an XSS issue distinct from CVE-2014-0334; connected sources also reference other CMS Made Sim...

CVE-2011-2092

Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creation of classes during deserialization of 1 AMF and 2 AMFX data, which allows attackers to have an unspecified impact via unknown vectors, related to a...

CVE-2011-2092

CVE-2011-2092 affects Adobe products: LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier. The root cause is improper restriction during deserialization of AMF and AMFX data that allows creation of classes, leading to an unresolved impact via unkn...

Debian: Security Advisory (DSA-2060-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2092

CVE-2010-2092 affects Cacti up to version 0.8.7e. A SQL injection can be triggered in graph.php via a crafted rra_id parameter (GET) combined with a valid rra_id in POST or a cookie, causing the GET value to be inserted into the query due to incomplete validation. Affected product: Cacti 0.8.7e a...

Cacti < 0.8.7f Multiple Input Validation Vulnerabilities

According to its self-reported version number, the Cacti application running on the remote web server is prior to version 0.8.7f. It is, therefore, potentially affected by the following vulnerabilities : - A vulnerability exists in 'templatesexport.php' due to improper validation of input to the...