132 matches found
CVE-2023-2099
CVE-2023-2099 affects SourceCodester Vehicle Service Management System v1.0. The vulnerability is a cross-site scripting flaw in an unknown part of /classes/Users.php where manipulating the id parameter triggers XSS. The issue can be exploited remotely and has publicly disclosed exploits (VDB-226...
WordPress WooCommerce Plugin < 6.6.0 Stored HTML Injection Vulnerability
The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
CVE-2022-2099
creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:58+00:00| seen| https://t.me/cibsecurity/46398 2023-04-18 01:39:16+00:00| seen| https://t.me/TYGYE/541 2023-04-27 22:58:00+00:00| seen| https://t.me/TYGYE/593 2025-07-16 03:32:30+00:00| seen| https://t.me/s4TechBots/45...
CVE-2022-2099 WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...
CVE-2099-2222
creationtimestamp| type| source ---|---|--- 2022-06-22 10:20:05+00:00| seen| https://t.me/GithubRedTeam/2559...
ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1591 more potentially affected by CVE-2020-2099 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.20)
org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2020-2099 Source advisory: OSV:GHSA-QP4F-2W67-C8HW...
CVE-2099-1234
Technical details for CVE-2099-1234 are not publicly available in the provided documents. Monitor for updates; no affected products, vectors, or remediation information can be stated at this time.
Mageia: Security Advisory (MGASA-2014-0280)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2099
Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the 1 GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, 2 Login function in the LoginContoller.LoginControllerCtrl.1 control, or 3 GetThumbnail...
USN-4784-1: Xerces-C++ vulnerabilities
It was discovered that Xerces-C++ XML Parser mishandles certain kinds of external DTD references, resulting in a user-after-free. An attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code. This issue affected only Ubuntu 16.04 ESM. CVE-2016-209...
CVE-2021-2099
CVE-2021-2099 affects Oracle E-Business Suite, Oracle CRM Technical Foundation (component: Preferences). Affects supported 12.2.3–12.2.10; vulnerability allows unauthenticated network access over HTTP to compromise Oracle CRM Technical Foundation. Attacks require user interaction, but can lead to...
Huawei EulerOS: Security Advisory for icu (EulerOS-SA-2020-2099)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-2099-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Jenkins < 2.214, < 2.204.2 LTS Authentication Bypass Vulnerability - Linux
Jenkins is prone to an inbound TCP Agent Protocol/3 authentication bypass vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...
Jenkins < 2.214, < 2.204.2 LTS Authentication Bypass Vulnerability - Windows
Jenkins is prone to an inbound TCP Agent Protocol/3 authentication bypass vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...
CVE-2020-2099
Summary of CVE-2020-2099 : Jenkins 2.213 and earlier (including LTS 2.204.1 and earlier) expose an authentication bypass in the Inbound TCP Agent Protocol/3 due to improper reuse of encryption parameters. This flaw allows an unauthenticated attacker who knows agent names to obtain the connection ...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2019-2099)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2099
CVE-2019-2099 affects Android systems due to an out-of-bounds write in nfa_rw_store_ndef_rx_buf within nfa_rw_act.cc. The underlying cause is a missing bounds check, allowing local elevation of privilege with no extra execution privileges required; exploitation requires user interaction. Affected...
