CVE-2024-2217 Improper Access Control in gaizhenbiao/chuanhuchatgpt

gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the config.json file. This vulnerability is present in both authenticated and unauthenticated versions of the application, enabling attackers to obtain sensitive information such as API keys...

SUSE CVE-2021-2217

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Amazon Linux 2 : oniguruma (ALAS-2023-2217)

The version of oniguruma installed on the remote host is prior to 5.9.6-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2217 advisory. An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A...

CVE-2023-2217

SourceCodester Task Reminder System 1.0 is affected by a SQL injection in /admin/reminders/manage_reminder.php via the id parameter. The vulnerability can be exploited remotely, with public disclosures noted in multiple sources (e.g., NVD, Red Hat, PRION, Vulners enrichment). Several connected do...

CVE-2023-2217 SourceCodester Task Reminder System manage_reminder.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Task Reminder System 1.0. This affects an unknown part of the file /admin/reminders/managereminder.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

FreeBSD : py-suds -- vulnerable to symlink attacks (b31f7029-817c-4c1f-b7d3-252de5283393)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b31f7029-817c-4c1f-b7d3-252de5283393 advisory. - cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and...

CVE-2014-2217

creationtimestamp| type| source ---|---|--- 2022-07-08 00:15:52+00:00| seen| https://t.me/cibsecurity/45793 2025-07-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-468/...

CVE-2021-29281

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

Unrestricted file upload

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

CVE-2021-29281

CVE-2021-29281 is a file-upload vulnerability in GFI Mail Archiver prior to or up to v15.1 caused by insecure use of the Telerik Web UI plugin, tying to CVE-2014-2217 and CVE-2017-11317. The vulnerability enables arbitrary file uploads/execution via the Telerik UI for ASP.NET AJAX file upload iss...

@candlelabs/sdk (>=1.0.1, <=1.0.2), candlelabssdk (1.0.0) potentially affected by CVE-2022-2217 via parse-url (6.0.0)

parse-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - @candlelabs/sdk =1.0.1, =1.0.2 - candlelabssdk 1.0.0 Source cves: CVE-2022-2217 Source advisory: OSV:GHSA-Q6WQ-5P59-983W...

CVE-2022-2217

creationtimestamp| type| source ---|---|--- 2022-06-27 14:34:54+00:00| seen| https://t.me/cibsecurity/45170...

CVE-2022-2217 Cross-site Scripting (XSS) - Generic in ionicabizau/parse-url

Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-2217

The CVE-2022-2217 issue is a cross-site scripting (XSS) vulnerability in the npm package parse-url (GitHub: ionicabizau/parse-url) affecting versions prior to 7.0.0 . The root cause is the ability to inject or execute malicious JavaScript on webpages produced by the affected package through craft...

Mageia: Security Advisory (MGASA-2013-0224)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mysql:8.0 security, bug fix, and enhancement update

An update is available for mecab-ipadic, mecab, mysql. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user, multi-threaded SQL database server...

CVE-2021-2217 affecting package mysql 8.0.23-1

CVE-2021-2217 affecting package mysql 8.0.23-1. An upgraded version of the package is available that resolves this issue...

Photon OS 3.0: Mysql PHSA-2021-3.0-0231

An update of the mysql package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0231. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

CVE-2021-2217 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-2217

CVE-2021-2217 affects Oracle MySQL Server (component: Server: Stored Procedure) with vulnerable versions 8.0.23 and earlier. An authenticated, high-privilege attacker with network access via multiple protocols can cause a hang or crash (Denial of Service) of MySQL Server (CVSS v3.1 base 4.9). Pub...