CVE-2022-2113 Cross-site Scripting (XSS) - Stored in inventree/inventree

Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...

CVE-2022-2113

InvenTree (open source inventory system) has a stored XSS vulnerability in versions prior to 0.7.2, arising from insufficient filtering/escaping of parameter data. The issue affects the part/description data stored and can lead to execution of malicious JavaScript on the client side when rendered...

Slackware: Security Advisory (SSA:2016-106-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:1022-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:1024-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2113

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: On Demand Billing. Supported versions that are affected are 2.9.0.0 and 2.9.0.1. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2021-2113

CVE-2021-2113 affects Oracle Financial Services Revenue Management and Billing (On Demand Billing) with affected versions 2.9.0.0 and 2.9.0.1. The vulnerability allows a low-privilege, network-access attacker (HTTP) to potentially update/insert/delete data in the affected data set. The CVSSv3.1 b...

Debian DLA-2113-1 : cloud-init security update

CVE-2020-8631 In cloud-init, relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function. CVE-2020-8632 In cloud-init, randuserpassword in cloudinit/config/ccsetpasswords.py has a...

CVE-2020-2113

CVE-2020-2113 affects Jenkins Git Parameter Plugin versions 0.9.11 and earlier. The UI shows the default value without escaping, enabling stored XSS exploitable by users with Job/Configure permission. Affected component is the Git Parameter Plugin’s UI input handling; root cause is lack of escapi...

CVE-2019-2113

creationtimestamp| type| source ---|---|--- 2019-07-08 21:00:15+00:00| seen| https://t.me/cveNotify/312...

CVE-2019-2113

In setup wizard there is a bypass of some checks when wifi connection is skipped. This could lead to factory reset protection bypass with no additional privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122597079...

CVE-2019-2113

CVE-2019-2113 affects Android 9 (Pie) in the System component. The issue stems from a bypass in the setup wizard that skips certain checks when Wi-Fi is not connected, enabling a factory reset protection bypass with no additional privileges and no required user interaction. The vulnerability is c...

CVE-2018-2113

...

CVE-2018-2113

CVE-2018-2113 entry is rejected/not used; not an active vulnerability entry.

CentOS Update for firefox CESA-2018:2113 centos7

Check the version of firefox SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882918";...

Oracle Linux 7 : firefox (ELSA-2018-2113)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-2113 advisory. - Added fix for mozbz1348168/CVE-2017-5428 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

CVE-2017-2113

CVE-2017-2113 is a buffer overflow vulnerability in I-O DATA network camera firmware affecting TS-WPTCAM (1.18 and earlier), TS-WPTCAM2 (1.00), TS-WLCE (1.18 and earlier), TS-WLC2 (1.18 and earlier), TS-WRLC (1.17 and earlier), TS-PTCAM (1.18 and earlier), and TS-PTCAM/POE (1.18 and earlier). The...

SOL79401162 - Samba vulnerabilities CVE-2016-2111, CVE-2016-2113, and CVE-2016-2114

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

Ubuntu: Security Advisory (USN-2950-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2950-3: Samba regressions

USN-2950-1 fixed vulnerabilities in Samba. The fixes introduced in Samba 4.3.8 caused certain regressions and interoperability issues. This update resolves some of these issues by updating to Samba 4.3.9 in Ubuntu 14.04 LTS, Ubuntu 15.10 and Ubuntu 16.04 LTS. Backported regression fixes were adde...