CVE-2023-2114

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14389 2026-07-30 00:00:48+00:00| seen| https://t.me/CVEhub/14389 2026-07-31 00:00:26+00:00| published-proof-of-concept| https://t.me/CVEhub/14389...

CVE-2026-2114 itsourcecode Society Management System edit_admin.php sql injection

A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/editadmin.php. The manipulation of the argument adminid results in sql injection. The attack may be performed from remote. The exploit is now public and may be us...

CVE-2019-2114

In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This could lead to local escalation of privilege by installing an application with no additional execution privileges needed. User interaction i...

CVE-2010-2114

Cross-site request forgery CSRF vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.web.PbxUserEdit bean...

CVE-2025-2114

A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Password Interface. The manipulation of t...

CVE-2025-2114

creationtimestamp| type| source ---|---|--- 2025-03-09 04:37:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6955 2025-03-09 06:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljwhfxlnas2h 2025-03-09 07:54:49+00:00| seen|...

CVE-2025-2114

CVE-2025-2114 affects Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7, specifically the Reset Password Interface component and its OperatorStop.asp handling. The root cause is improper authorization due to manipulation of the OperId parameter in that endpoint, which may ...

CVE-2024-2114

creationtimestamp| type| source ---|---|--- 2025-02-11 02:18:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuls6s2qa2x...

Amazon Linux 2 : open-vm-tools (ALAS-2023-2114)

The version of open-vm-tools installed on the remote host is prior to 12.1.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2114 advisory. VMware Tools 12.0.0, 11.x.y and 10.x.y contains a local privilege escalation vulnerability. A malicious actor with local...

CVE-2023-2114 NEX-Forms < 8.4 - Admin+ SQL Injection

The NEX-Forms WordPress plugin before 8.4 does not properly escape the table parameter, which is populated with user input, before concatenating it to an SQL query...

CVE-2023-2114

CVE-2023-2114 concerns the NEX-Forms WordPress plugin (pre-8.4) where the table parameter (populated with user input) is not properly escaped before being concatenated into an SQL query. Root cause: lack of input sanitization for the table parameter in the form-save workflow, enabling SQL Injecti...

CVE-2023-2114 NEX-Forms < 8.4 - Admin+ SQL Injection

The NEX-Forms WordPress plugin before 8.4 does not properly escape the table parameter, which is populated with user input, before concatenating it to an SQL query...

WordPress NEX-Forms – Ultimate Form Builder Plugin < 8.4 is vulnerable to SQL Injection

Software NEX-Forms – Ultimate Form Builder Type Plugin Vulnerable versions 8.4 Fixed in 8.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2114 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 633a726244b6 Credits Alexander Schmid Required privilege...

Debian: Security Advisory (DSA-2114-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2016-2114

The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream...

CVE-2022-2114 Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting

The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in...

CVE-2022-2114

The CVE-2022-2114 entry concerns the WordPress plugin Data Tables Generator by Supsystic. The vulnerability arises because the plugin before version 1.10.20 does not sanitise and escape certain Table settings, enabling stored XSS for high-privilege users (e.g., admin) when unfiltered_html is disa...

Slackware: Security Advisory (SSA:2016-106-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0221)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2114

The CVE affects Oracle E-Business Suite, specifically the Oracle Common Applications Calendar (Applications Calendar). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows an unauthenticated, network-accessible attacker to compromise Oracle Common Applications Calendar...