CVE-2024-2149

creationtimestamp| type| source ---|---|--- 2024-03-03 19:26:55+00:00| seen| https://t.me/ctinow/198875 2024-03-03 19:26:59+00:00| seen| https://t.me/ctinow/198879...

CVE-2024-2149

CVE-2024-2149 affects CodeAstro Membership Management System 1.0, specifically the code path in settings.php where the currency parameter can be manipulated to trigger SQL injection. The vulnerability is remote(attack vector: network) with high impact on confidentiality, integrity, and availabili...

CVE-2024-2149 CodeAstro Membership Management System settings.php sql injection

A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file settings.php. The manipulation of the argument currency leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

Amazon Linux 2 : ipa (ALAS-2023-2149)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2149 advisory. A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name- based authentication. The Samba AD DC, could become confused about the user a ticket represents if i...

CVE-2023-2149

CVE-2023-2149 concerns Campcodes Online Thesis Archiving System 1.0. The vulnerability is a SQL injection in the file /admin/user/manage_user.php caused by improper handling of the id parameter, allowing remote exploitation. The issue affects unknown code paths in that file and can lead to unauth...

CVE-2023-2149 Campcodes Online Thesis Archiving System manage_user.php sql injection

A vulnerability classified as critical was found in Campcodes Online Thesis Archiving System 1.0. This vulnerability affects unknown code of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2008-2149 affecting package wordnet for versions less than 3.0-38

CVE-2008-2149 affecting package wordnet for versions less than 3.0-38. A patched version of the package is available...

CVE-2022-2149

creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:40+00:00| seen| https://t.me/cibsecurity/46383...

CVE-2022-2149

The Very Simple Breadcrumb WordPress plugin through 1.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2149

CVE-2022-2149 concerns the WordPress plugin Very Simple Breadcrumb (

CVE-2022-2149 Very Simple Breadcrumb <= 1.0 - Admin+ Stored Cross-Site Scripting

The Very Simple Breadcrumb WordPress plugin through 1.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

MSC-2021-2149

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-2149)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2149

CVE-2021-2149 affects Oracle ZFS Storage Appliance Kit Core 8.8. The vulnerability allows a low-privilege attacker with local access to potentially perform unauthorized updates, insertions, or deletions of data within the Oracle ZFS Storage Appliance Kit. Root cause details are tied to the Core c...

Debian: Security Advisory (DLA-2149-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2149-1 : rails security update

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the j or escapejavascript methods may be susceptible to XSS attacks. For Debian 8 'Jessie', this problem has been fixed in version...

CVE-2020-2149

CVE-2020-2149 affects Jenkins Repository Connector Plugin (versions 1.2.6 and earlier). The flaw is that configured credentials are transmitted in plain text as part of the global Jenkins configuration form, even though credentials are stored encrypted on disk in RepositoryConfiguration.xml. This...

CVE-2020-2149

Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2019-2149

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113262406...

CVE-2019-2149

CVE-2019-2149 affects the libxaac component in Android 10. The issue is an out-of-bounds read caused by a missing bounds check, leading to potential information disclosure. Exploitation requires user interaction. Multiple sources (Android NVD entry, Red Hat, CNVD, etc.) corroborate this vulnerabi...