203 matches found
CVE-2016-2107
CVE-2016-2107 Prueba simple para el oráculo de padding de OpenSSL de mayo de 2016 CVE-2016-2107 Instalación root@kitploit: $ go version go version go1.6.2 darwin/amd64 $ go get github.com/FiloSottile/CVE-2016-2107 Esta herramienta solo compila con Go 1.6+, y solo cuando se descarga en la posición...
docker-cve-2016-2107
docker-cve-2016-2107 Docker container implementing tests for CVE-2016-2107 - LuckyNegative20 About Dockerized test for CVE-2016-2107. Code written by Filippo Valsorda: GitHub zero to decryption blog explaining the vulenrabiltiy online CVE-2016-2107 test Update Current version is using static...
Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2107)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2107 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable CVE-2026-64017 In the Linux kernel, the following vulnerability has been resolved...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Aspera Transfer Cluster Manager, faspex on Demand, Server on Demand, Application Platform on
Question Security Bulletin: Vulnerabilities in OpenSSL affect IBM Aspera Transfer Cluster Manager, faspex on Demand, Server on Demand, Application Platform on Demand, and Azure on Demand. CVE-2016-2107, CVE-2016-2106, CVE-2016-2176 "Business Unit":"code":"BU059","label":"IBM Software w/o...
SUSE SLES15 Security Update : podman (SUSE-SU-2026:2107-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2107-1 advisory. This update for podman rebuilds it against the current go security release. Tenable has extracted the preceding description block directly...
Security update for podman
This update for podman rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap 15.4...
CVE-2026-2107
A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\LoginfoController.java of the component Log Info...
CVE-2026-2107 yeqifu warehouse Log Info LoginfoController.java batchDeleteLoginfo improper authorization
A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\LoginfoController.java of the component Log Info...
MiracleLinux 7 : openssl-1.0.1e-51.el7.5 (AXSA:2016-230:03)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-230:03 advisory. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries...
EUVD-2026-2107
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2019-2107
In ihevcdparsepps of ihevcdparseheaders.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2025-2107)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2107
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2002-2107
Cross-site scripting XSS vulnerability in the lookup script in Veridis OpenKeyServer OKS 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2025-2107
creationtimestamp| type| source ---|---|--- 2025-03-13 04:30:44+00:00| seen| Telegram/1dmDNu67PJ1QF1um8GixQtYaB6xOH24Lc5YQ6NksCpdAbzg 2025-03-13 04:44:55+00:00| seen| https://t.me/cvedetector/20178 2025-03-14 14:45:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7564...
CVE-2025-2107 Arielbrailovsky-Viralad <= 1.0.8 - Unauthenticated SQL Injection
The ArielBrailovsky-ViralAd plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the printResultAndDie function in all versions up to, and including, 1.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
CVE-2025-2107
CVE-2025-2107 concerns the WordPress plugin ArielBrailovsky-ViralAd . The vulnerability is an Unauthenticated SQL Injection via the id parameter in the function printResultAndDie() for all versions up to and including 1.0.8. The issue arises from inadequate input escaping and lack of parameterize...
Siemens SCALANCE X-200RNA Switch Devices Exposure of Sensitive Information to an Unauthorized Actor (CVE-2016-2107)
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability...
SUSE SLES15 / openSUSE 15 Security Update : php-composer2 (SUSE-SU-2024:2107-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2107-1 advisory. - CVE-2024-35241: Fixed code execution when installing packages in repository with specially crafted branch names...