108 matches found
CVE-2022-2216 Server-Side Request Forgery (SSRF) in ionicabizau/parse-url
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2216
CVE-2022-2216 corresponds to a Server-Side Request Forgery (SSRF) in the GitHub repository ionicabizau/parse-url, affecting versions prior to 7.0.0. The connected documents describe the issue as an SSRF flaw in the URL parsing logic (with references noting potential local file access). The root c...
CVE-2022-2216 Server-Side Request Forgery (SSRF) in ionicabizau/parse-url
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2021-2216
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Multichannel Framework. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...
CVE-2021-2216
CVE-2021-2216 affects Oracle PeopleSoft Enterprise PeopleTools Multichannel Framework (versions 8.56–8.58). An unauthenticated attacker with network access via HTTP can compromise the system; successful attacks require human interaction and may lead to unauthorized update/insert/delete and read a...
SUSE: Security Advisory (SUSE-SU-2020:2216-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2020-2216)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2216
Affected software: Jenkins Zephyr for JIRA Test Management Plugin, versions 1.5 and earlier.Root cause: Missing permission checks allow an attacker with Overall/Read to cause the plugin to connect to an attacker-controlled HTTP server using attacker-specified username/password.Impact: Authenticat...
CVE-2019-2216
In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to a local escalation of privilege because the user is not notified of an overlaying app, with User execution privileges needed. User interaction is needed for exploitation.Product:...
CVE-2019-2216
CVE-2019-2216 affects Android 10 and is described across multiple sources as a local elevation of privilege due to improper input validation in overlay notifications. The vulnerability could allow a malicious overlaying app to gain high privileges without notifying the user, with exploitation req...
CVE-2012-2216
SocialEngine before 4.2.4 has multiple vulnerabilities: CVE-2012-6720 (XSS) via the title parameter to music/create, the location parameter to events/create, or the search parameter to widget/index/content_id/*; CVE-2012-6721 (CSRF) in the Forum, Event, and Classifieds plugins. No exploit details...
Security Bulletin: Multiple vulnerabilities in the IBM SDK for Node.js affect the Cordova tools in IBM Rational Application Developer (CVE-2016-2086, CVE-2016-2216, CVE-2015-3197)
Summary Security vulnerabilities have been discovered in the IBM SDK for Node.js used by the Cordova platform packaged in IBM Rational Application Developer. Vulnerability Details CVEID: CVE-2016-2086 DESCRIPTION: Node.js is vulnerable to HTTP request smuggling, caused by the improper handling of...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2019-2216)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK for Node.js™ in IBM Bluemix (CVE-2015-3197, CVE-2016-2086, CVE-2016-2216)
Summary This bulletin describes CVE-2015-3197 that was reported on January 26, 2015 by the OpenSSL Project, plus two additional vulnerabilities. Vulnerability Details CVEID: CVE-2015-3197 DESCRIPTION: OpenSSL could allow a remote attacker to conduct man-in-the-middle attacks, caused by the use of...
CVE-2017-2216
The CVE-2017-2216 entry concerns the WordPress Download Manager plugin prior to version 2.9.50, which is affected by a Cross-site Scripting (XSS) vulnerability. The exact vectors are not specified in the description, but the vulnerability allows remote attackers to inject arbitrary web script or ...
JVN#79738260: Multiple vulnerabilities in WordPress plugin "WordPress Download Manager"
The WordPress plugin "WordPress Download Manager" provided by W3 Eden, Inc. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-2216 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...
F5 Networks BIG-IP : Node.js vulnerability (K23134279)
The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as...