Lucene search
+L

86 matches found

Circl
Circl
added 2023/12/11 3:18 p.m.17 views

CVE-2013-2205

creationtimestamp| type| source ---|---|--- 2023-12-11 15:18:07+00:00| seen| https://t.me/arpsyndicate/1765...

4.3CVSS4.7AI score0.0296EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/11 12:00 a.m.10 views

PT-2023-28366 · Sap · Sap Commerce Cloud

Name of the Vulnerable Software and Affected Versions: SAP Commerce Cloud versions HY COM 1905 through HY COM 2205, COM CLOUD 2211 Description: A locked B2B user can misuse the forgotten password functionality to un-block their user account again and re-gain access if SAP Commerce Cloud -...

8.1CVSS7.1AI score0.00521EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:00 a.m.62 views

Oracle Linux 7 : tomcat (ELSA-2019-2205)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2205 advisory. - Resolves: rhbz1641873 CVE-2018-11784 tomcat: Open redirect in default servlet - Resolves: rhbz1552375 CVE-2018-1304 tomcat: Incorrect handling of emp...

9.8CVSS7.2AI score0.94494EPSS
SaveExploits5References5
Tenable Nessus
Tenable Nessus
added 2023/08/23 12:00 a.m.39 views

Amazon Linux 2 : edk2 (ALAS-2023-2205)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2205 advisory. Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckexor EVPPKEYparamcheck to check a DH key or DH paramete...

5.3CVSS6.4AI score0.06531EPSS
SaveExploits0References4
Circl
Circl
added 2023/04/21 12:37 p.m.10 views

CVE-2023-2205

creationtimestamp| type| source ---|---|--- 2023-04-21 12:37:57+00:00| seen| https://t.me/cibsecurity/62573...

7.5CVSS6.5AI score0.00607EPSS
SaveExploits1References1
CVE
CVE
added 2023/04/21 7:00 a.m.52 views

CVE-2023-2205

The CVE-2023-2205 entry concerns Campcodes Retro Basketball Shoes Online Store version 1.0. Affected functionality is the file /function/login.php, where manipulating the email parameter leads to a SQL injection. The vulnerability may be exploited remotely and has been publicly disclosed. Multipl...

7.5CVSS6.9AI score0.00607EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/04/21 7:00 a.m.42 views

CVE-2023-2205 Campcodes Retro Basketball Shoes Online Store login.php sql injection

A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...

6.5CVSS8AI score0.00607EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.25 views

SAP Commerce 输入验证错误漏洞

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. An input validation error vulnerability exists in SAP Commerce versions 1905, 2005, 2105, 2011, and 2205, which ca...

8.8CVSS6.9AI score0.00811EPSS
SaveExploits0References4
OSV
OSV
added 2022/10/10 9:15 p.m.11 views

CVE-2022-34402

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service...

4.9CVSS5.8AI score0.00634EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/10 9:15 p.m.21 views

Denial of service

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service...

3.3CVSS5AI score0.00634EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/10/10 8:55 p.m.58 views

CVE-2022-34402

Dell Wyse ThinOS 2205 UI is affected by a Regular Expression Denial of Service vulnerability. The root cause is an inefficient regex in the UI, which could be exploited by an admin-privileged attacker to cause a denial of service. The issue is documented across multiple sources (including NVD and...

6.8CVSS5AI score0.00634EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/14 12:00 a.m.13 views

PT-2022-5136 · Dell · Dell Wyse Thinos

Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS version 2205 Description: The issue is related to the use of a regular expression with inefficient computational complexity in the UI of Dell Wyse ThinOS. This could allow a remote attacker to cause a denial-of-service. An...

6.8CVSS5.3AI score0.00634EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/07/27 12:00 a.m.36 views

CVE-2022-2205

Unknown description...

5.8AI score
SaveExploits0References2
CVE
CVE
added 2021/04/22 9:53 p.m.178 views

CVE-2021-2205

CVE-2021-2205 affects Oracle E-Business Suite's Oracle Marketing (Marketing Administration) with affected versions 12.2.7–12.2.10. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise Oracle Marketing, potentially enabling unauthorized creation, deletio...

9.1CVSS8.4AI score0.01344EPSS
SaveExploits3References1Affected Software1
NVD
NVD
added 2020/07/02 3:15 p.m.48 views

CVE-2020-2205

Jenkins VncRecorder Plugin 1.25 and earlier does not escape a tool path in the checkVncServ form validation endpoint, resulting in a stored cross-site scripting XSS vulnerability exploitable by Jenkins administrators...

4.8CVSS0.00702EPSS
SaveExploits0References2
CVE
CVE
added 2020/07/02 2:55 p.m.73 views

CVE-2020-2205

CVE-2020-2205 affects Jenkins VncRecorder Plugin 1.25 and earlier. The vulnerability arises because the tool path in the checkVncServ form validation endpoint is not escaped, leading to a stored XSS condition exploitable by Jenkins administrators. Documents consistently describe the affected comp...

4.8CVSS4.9AI score0.00702EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2020/05/09 12:00 a.m.41 views

Debian: Security Advisory (DLA-2205-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.8AI score0.05803EPSS
SaveExploits0References3
Circl
Circl
added 2019/11/14 8:06 a.m.14 views

CVE-2019-2205

creationtimestamp| type| source ---|---|--- 2019-11-14 08:06:14+00:00| seen| https://t.me/androidMalware/485 2024-02-13 17:36:54+00:00| seen| https://t.me/ctinow/183983...

10CVSS8.7AI score0.02864EPSS
SaveExploits0References2
CVE
CVE
added 2019/11/13 5:37 p.m.84 views

CVE-2019-2205

CVE-2019-2205 affects Android 8.0–10 and is caused by a use-after-free in ProxyResolverV8::SetPacScript (proxy_resolver_v8.cc), leading to memory corruption and remote code execution without user interaction. Exploitation is network-based (no privileges required) with high impact on confidentiali...

10CVSS9.3AI score0.02864EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:00 a.m.79 views

RHEL 7 : tomcat (RHSA-2019:2205)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2205 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incorrect handling ...

9.8CVSS7.8AI score0.21719EPSS
SaveExploits2References14
Rows per page
Query Builder