81 matches found
CVE-2022-2101
CVE-2022-2101 affects the WordPress Download Manager plugin (versions up to 3.2.46). It enables Stored Cross-Site Scripting via the file[files][] parameter due to insufficient input sanitization and output escaping. Authenticated attackers with contributor+ permissions can inject scripts on the f...
MSC-2022-2101
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...
WordPress Download Manager 3.2.43 Cross Site Scripting
Exploit Title: Download Manager Cross-Site Scripting Date: 2022-06-16 Exploit Author : Andrea Bocchetti Vendor Homepage : https://wordpress.org/plugins/download-manager/ Version : = 3.2.43 Tested on: windows CVE : CVE-2022-2101 Description 1- Login in the plugin page 2- add the xss payload in the...
SUSE SLES12 Security Update : apache2 (SUSE-SU-2022:2101-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2101-1 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows a...
SUSE: Security Advisory (SUSE-SU-2018:2101-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2101
creationtimestamp| type| source ---|---|--- 2021-01-20 18:27:17+00:00| seen| https://t.me/cibsecurity/22338...
CVE-2021-2101
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2021-2101
Oracle E-Business Suite — One-to-One Fulfillment Print Server vulnerability (CVE-2021-2101) affects 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with HTTP access can compromise data and gain unauthorized access. CVSS 3.1 base score 9.1 (C/H, I/H). Remediation: Oracle CPU Jan 2021...
Oracle E-Business Suite Multiple Vulnerabilities (Jan 2021 CPU)
The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2021 CPU advisory. - Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected a...
Jenkins < 2.219, < 2.204.2 LTS Multiple Vulnerabilities - Windows
Jenkins is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Jenkins < 2.219, < 2.204.2 LTS Multiple Vulnerabilities - Linux
Jenkins is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-2101
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret...
CVE-2020-2101
CVE-2020-2101 affects Jenkins 2.218 and earlier, and OpenJDK LTS 2.204.1 and earlier, where inbound TCP agent connection secrets are not checked with a constant-time comparison. This can enable a timing attack to probe the secret. The issue is rooted in non-constant-time comparison logic used dur...
CVE-2013-2101
creationtimestamp| type| source ---|---|--- 2019-12-03 18:02:19+00:00| seen| https://t.me/cibsecurity/8461 2024-03-05 17:22:20+00:00| seen| https://t.me/ctinow/200461...
CentOS Update for exiv2 CESA-2019:2101 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : exiv2 (RHSA-2019:2101)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2101 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The...
Debian: Security Advisory (DLA-1862-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2101
In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...
CVE-2019-2101
CVE-2019-2101 affects the Android kernel as described in the connected advisories. The vulnerability is caused by an out-of-bounds read in the function uvc_parse_standard_control within uvc_driver.c , resulting from improper input validation. This can lead to local information disclosure without ...