71 matches found
CVE-2024-2229
creationtimestamp| type| source ---|---|--- 2024-03-18 17:27:10+00:00| seen| https://t.me/ctinow/210767 2024-03-18 17:32:15+00:00| seen| https://t.me/ctinow/210781...
CVE-2024-2229
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious project file is loaded into the application by a valid user...
CVE-2024-2229
Schneider Electric EcoStruxure Power Design - Ecodial (NL/INT/FR) is affected by a CWE-502 Deserialization of Untrusted Data vulnerability in the BinSerializer deserialization path. All versions of EcoStruxure Power Design - Ecodial are listed as affected; the issue could allow remote code execut...
CVE-2019-2229
creationtimestamp| type| source ---|---|--- 2024-03-09 08:11:14+00:00| seen| https://t.me/ctinow/203805...
CVE-2023-2229
creationtimestamp| type| source ---|---|--- 2024-01-03 22:22:34+00:00| seen| https://t.me/arpsyndicate/2368...
CVE-2020-2229
creationtimestamp| type| source ---|---|--- 2023-12-18 00:50:57+00:00| seen| https://t.me/arpsyndicate/1875...
Amazon Linux 2 : cri-tools (ALAS-2023-2229)
The version of cri-tools installed on the remote host is prior to 1.26.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2229 advisory. 2023-10-11: The severity level was changed from Important to Medium. Extremely large RSA keys in certificate chains can cause a...
Oracle Linux 7 : spice-gtk (ELSA-2019-2229)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2229 advisory. libgovirt 0.3.4-2 - Parse XML nodes automatically Related: rhbz1427467 - Set detailed error message for async call Related: rhbz1427467 spice-gtk 0.35-4 - Fix b...
CVE-2023-2229
CVE-2023-2229 affects the WordPress Quick Post Duplicator (rduplicator) up to version 2.0. The root cause is an SQL Injection via the post_id parameter due to insufficient escaping and lack of prepared statements, enabling authenticated attackers with contributor privileges to append additional S...
WordPress Quick Post Duplicator Plugin <= 2.0 is vulnerable to SQL Injection
Software Quick Post Duplicator Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2229 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 82cd33300670 Credits Marco Wotschka Required privilege Contributor...
RHEL 7 : rh-ruby27-ruby (RHSA-2021:2229)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2229 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2022-2229)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GitLab 13.7 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-2229)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an...
GitLab 13.7.x < 14.10.5, 15.0.x < 15.0.4, 15.1.x < 15.1.1 Improper Authorization Vulnerability
GitLab is prone to an improper authorization vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...
CVE-2022-2229
creationtimestamp| type| source ---|---|--- 2022-07-01 20:42:43+00:00| seen| https://t.me/cibsecurity/45483...
CVE-2022-2229
CVE-2022-2229 concerns an improper authorization flaw in GitLab CE/EE. Affected versions are 13.7 <= version < 14.10.5, 15.0 <= version < 15.0.4, and 15.1 <= version
CVE-2021-2229
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: LOVs. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks o...
CVE-2021-2229
The CVE-2021-2229 entry describes a vulnerability in Oracle E-Business Suite (Depot Repair LOVs component) affecting 12.1.1–12.1.3. The issue allows a network-based, low-privilege attacker (via HTTP) to trigger unauthorized creation/deletion/modification of data or gain access to sensitive data w...
Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting
Exploit Title: Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting Date: 11/12/2020 Exploit Author: gx1 Vendor Homepage: https://www.jenkins.io/ Software Link: https://updates.jenkins-ci.org/download/war/ Version: svgIcon is a layout...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.4.27 openshift-jenkins-2-container security update
An update for openshift-jenkins-2-container is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...