41 matches found
CVE-2024-21876
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability via a URL parameter in Enphase IQ Gateway formerly known as Envoy allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and 8.2.4225...
CVE-2024-21876 Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability via a URL parameter in Enphase IQ Gateway formerly known as Envoy allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and 8.2.4225...
CVE-2024-21876
CVE-2024-21876 affects Enphase IQ Gateway (formerly Envoy). A path traversal vulnerability allows an unauthenticated attacker to access or create arbitrary files via a URL parameter. Affects Envoy versions 4.x–8.x and
CVE-2024-21876 Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability via a URL parameter in Enphase IQ Gateway formerly known as Envoy allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and 8.2.4225...
SUSE CVE-2023-21876
unknown...
CVE-2023-21876 affecting package mysql 8.0.31-1
CVE-2023-21876 affecting package mysql 8.0.31-1. An upgraded version of the package is available that resolves this issue...
CBL Mariner 2.0 Security Update: mysql (CVE-2023-21876)
The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-21876 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions th...
Moderate: Red Hat Security Advisory: rh-mysql80-mysql security update
An update for rh-mysql80-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2023-21876 affecting package mysql for versions less than 8.0.32-1
CVE-2023-21876 affecting package mysql for versions less than 8.0.32-1. An upgraded version of the package is available that resolves this issue...
Ubuntu: Security Advisory (USN-5823-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-21876
creationtimestamp| type| source ---|---|--- 2023-01-18 02:29:35+00:00| seen| https://t.me/cibsecurity/56647 2023-11-15 17:01:59+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5993...
CVE-2023-21876
CVE-2023-21876 affects Oracle MySQL Server (component: Server: Optimizer) with affected versions 8.0.31 and earlier. The vulnerability enables a high-privilege attacker with network access via multiple protocols to cause a hang or a likely crash (complete DoS) of MySQL Server. The base CVSS v3.1 ...
CVE-2023-21876
...
CVE-2022-21876
Win32k Information Disclosure Vulnerability...
CVE-2022-21876
Win32k Information Disclosure Vulnerability...
CVE-2022-21876
Technical details for CVE-2022-21876 are not publicly available in the provided documents. Monitor for updates from the sources listed in the NVD entry and associated advisories.
KB5009557: Windows 10 Version 1809 and Windows Server 2019 Security Update (January 2022)
The remote Windows host is missing security update 5009557. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21836 - A denial of service DoS vulnerabilit...
KB5009543: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (January 2022)
The remote Windows host is missing security update 5009543. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21849, CVE-2022-21850,...
