103 matches found
SUSE CVE-2019-2214
In bindertransaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...
RHEL 8 : firefox (RHSA-2021:2214)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:2214 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to versi...
CVE-2022-36707
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2214. Reason: This candidate is a reservation duplicate of CVE-2022-2214. Notes: All CVE users should reference CVE-2022-2214 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2022-36707
CVE-2022-36707 is a reservation duplicate of CVE-2022-2214 (the CVE entry is not to be used). Connected records provide concrete details for CVE-2022-2214: a critical SQL injection in SourceCodester Library Management System 1.0. The vulnerability affects the /librarian/bookdetails.php endpoint a...
CVE-2022-2214
A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...
CVE-2022-2214
Overview: CVE-2022-2214 affects the SourceCodester Library Management System 1.0. Vulnerability: SQL injection in the /librarian/bookdetails.php endpoint via the id parameter (e.g., ' AND (SELECT 9198 FROM (SELECT(SLEEP(5)))iqZA)-- PbtB ), allowing remote attacker input to alter SQL logic. Impact...
CVE-2022-2214 SourceCodester Library Management System bookdetails.php sql injection
A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...
RHEL 6 : zlib (RHSA-2022:2214)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:2214 advisory. The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fixes: zlib: A flaw...
CVE-2021-2214
CVE-2021-2214 affects Oracle WebLogic Server Console component across multiple supported versions (10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0). The Red Hat entry and NVD/NCSC records describe a vulnerability that is difficult to exploit but allows a high-privilege attacker with ne...
CVE-2020-2214
Jenkins ZAP Pipeline Plugin 1.9 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...
CVE-2020-2214
CVE-2020-2214: Jenkins ZAP Pipeline Plugin ≤1.9 disables Content-Security-Policy for user-generated content in workspaces, archived artifacts, and related download paths, enabling cross-site scripting risks. Affected software spans the ZAP Pipeline Plugin (1.9 and earlier) and various Jenkins ver...
RHEL 7 : kernel (RHSA-2020:2214)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2214 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: double free may be caused by t...
Debian DLA-2214-1 : libexif security update
Various vulnerabilities have been addressed in libexif, a library to parse EXIF metadata files. CVE-2016-6328 An integer overflow when parsing the MNOTE entry data of the input file had been found. This could have caused denial of service DoS and Information Disclosure disclosing some critical he...
CVE-2014-2214
POSH (Posh portal / Portaneo) 3.0–3.2.1 suffers XSS vulnerabilities that allow remote attackers to inject arbitrary scripts/HTML via the login.php error parameter or portal/openrssarticle.php id parameter. Affected versions, entry CVE-2014-2214, are described in NVD with CVSS metrics (2.0: 4.3, M...
CVE-2019-2214
In bindertransaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...
DEBIAN-CVE-2019-2214
In bindertransaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...
CVE-2019-2214
CVE-2019-2214 affects the Linux/Android kernel binder subsystem. In binder_transaction of binder.c, there is an out-of-bounds write due to a missing bounds check, allowing local escalation of privilege without additional execution privileges or user interaction. Affected software appears in Andro...
CVE-2018-2214
This CVE entry is rejected/not used; does not represent an active vulnerability.
CVE-2012-2323
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2214. Reason: This candidate is a reservation duplicate of CVE-2012-2214. Notes: All CVE users should reference CVE-2012-2214 instead of this candidate. All references and descriptions in this candidate have been removed to...