86 matches found
CVE-2013-2205
creationtimestamp| type| source ---|---|--- 2023-12-11 15:18:07+00:00| seen| https://t.me/arpsyndicate/1765...
PT-2023-28366 · Sap · Sap Commerce Cloud
Name of the Vulnerable Software and Affected Versions: SAP Commerce Cloud versions HY COM 1905 through HY COM 2205, COM CLOUD 2211 Description: A locked B2B user can misuse the forgotten password functionality to un-block their user account again and re-gain access if SAP Commerce Cloud -...
Oracle Linux 7 : tomcat (ELSA-2019-2205)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2205 advisory. - Resolves: rhbz1641873 CVE-2018-11784 tomcat: Open redirect in default servlet - Resolves: rhbz1552375 CVE-2018-1304 tomcat: Incorrect handling of emp...
Amazon Linux 2 : edk2 (ALAS-2023-2205)
It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2205 advisory. Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckexor EVPPKEYparamcheck to check a DH key or DH paramete...
CVE-2023-2205
creationtimestamp| type| source ---|---|--- 2023-04-21 12:37:57+00:00| seen| https://t.me/cibsecurity/62573...
CVE-2023-2205
The CVE-2023-2205 entry concerns Campcodes Retro Basketball Shoes Online Store version 1.0. Affected functionality is the file /function/login.php, where manipulating the email parameter leads to a SQL injection. The vulnerability may be exploited remotely and has been publicly disclosed. Multipl...
CVE-2023-2205 Campcodes Retro Basketball Shoes Online Store login.php sql injection
A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...
SAP Commerce 输入验证错误漏洞
SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. An input validation error vulnerability exists in SAP Commerce versions 1905, 2005, 2105, 2011, and 2205, which ca...
CVE-2022-34402
Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service...
Denial of service
Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service...
CVE-2022-34402
Dell Wyse ThinOS 2205 UI is affected by a Regular Expression Denial of Service vulnerability. The root cause is an inefficient regex in the UI, which could be exploited by an admin-privileged attacker to cause a denial of service. The issue is documented across multiple sources (including NVD and...
PT-2022-5136 · Dell · Dell Wyse Thinos
Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS version 2205 Description: The issue is related to the use of a regular expression with inefficient computational complexity in the UI of Dell Wyse ThinOS. This could allow a remote attacker to cause a denial-of-service. An...
CVE-2022-2205
Unknown description...
CVE-2021-2205
CVE-2021-2205 affects Oracle E-Business Suite's Oracle Marketing (Marketing Administration) with affected versions 12.2.7–12.2.10. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise Oracle Marketing, potentially enabling unauthorized creation, deletio...
CVE-2020-2205
Jenkins VncRecorder Plugin 1.25 and earlier does not escape a tool path in the checkVncServ form validation endpoint, resulting in a stored cross-site scripting XSS vulnerability exploitable by Jenkins administrators...
CVE-2020-2205
CVE-2020-2205 affects Jenkins VncRecorder Plugin 1.25 and earlier. The vulnerability arises because the tool path in the checkVncServ form validation endpoint is not escaped, leading to a stored XSS condition exploitable by Jenkins administrators. Documents consistently describe the affected comp...
Debian: Security Advisory (DLA-2205-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2205
creationtimestamp| type| source ---|---|--- 2019-11-14 08:06:14+00:00| seen| https://t.me/androidMalware/485 2024-02-13 17:36:54+00:00| seen| https://t.me/ctinow/183983...
CVE-2019-2205
CVE-2019-2205 affects Android 8.0–10 and is caused by a use-after-free in ProxyResolverV8::SetPacScript (proxy_resolver_v8.cc), leading to memory corruption and remote code execution without user interaction. Exploitation is network-based (no privileges required) with high impact on confidentiali...
RHEL 7 : tomcat (RHSA-2019:2205)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2205 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incorrect handling ...