69 matches found
CVE-2019-2229
creationtimestamp| type| source ---|---|--- 2024-03-09 08:11:14+00:00| seen| https://t.me/ctinow/203805...
CVE-2023-2229
creationtimestamp| type| source ---|---|--- 2024-01-03 22:22:34+00:00| seen| https://t.me/arpsyndicate/2368...
CVE-2020-2229
creationtimestamp| type| source ---|---|--- 2023-12-18 00:50:57+00:00| seen| https://t.me/arpsyndicate/1875...
Amazon Linux 2 : cri-tools (ALAS-2023-2229)
The version of cri-tools installed on the remote host is prior to 1.26.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2229 advisory. 2023-10-11: The severity level was changed from Important to Medium. Extremely large RSA keys in certificate chains can cause a...
Oracle Linux 7 : spice-gtk (ELSA-2019-2229)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2229 advisory. libgovirt 0.3.4-2 - Parse XML nodes automatically Related: rhbz1427467 - Set detailed error message for async call Related: rhbz1427467 spice-gtk 0.35-4 - Fix b...
CVE-2023-2229
CVE-2023-2229 affects the WordPress Quick Post Duplicator (rduplicator) up to version 2.0. The root cause is an SQL Injection via the post_id parameter due to insufficient escaping and lack of prepared statements, enabling authenticated attackers with contributor privileges to append additional S...
WordPress Quick Post Duplicator Plugin <= 2.0 is vulnerable to SQL Injection
Software Quick Post Duplicator Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2229 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 82cd33300670 Credits Marco Wotschka Required privilege Contributor...
RHEL 7 : rh-ruby27-ruby (RHSA-2021:2229)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2229 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2022-2229)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GitLab 13.7 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-2229)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an...
GitLab 13.7.x < 14.10.5, 15.0.x < 15.0.4, 15.1.x < 15.1.1 Improper Authorization Vulnerability
GitLab is prone to an improper authorization vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...
CVE-2022-2229
creationtimestamp| type| source ---|---|--- 2022-07-01 20:42:43+00:00| seen| https://t.me/cibsecurity/45483...
CVE-2022-2229
CVE-2022-2229 concerns an improper authorization flaw in GitLab CE/EE. Affected versions are 13.7 <= version < 14.10.5, 15.0 <= version < 15.0.4, and 15.1 <= version
ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1593 more potentially affected by CVE-2020-2229 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.23)
org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2020-2229 Source advisory: OSV:GHSA-HVMC-7G2X-R3P9...
CVE-2021-2229
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: LOVs. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks o...
CVE-2021-2229
The CVE-2021-2229 entry describes a vulnerability in Oracle E-Business Suite (Depot Repair LOVs component) affecting 12.1.1–12.1.3. The issue allows a network-based, low-privilege attacker (via HTTP) to trigger unauthorized creation/deletion/modification of data or gain access to sensitive data w...
Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting
Exploit Title: Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting Date: 11/12/2020 Exploit Author: gx1 Vendor Homepage: https://www.jenkins.io/ Software Link: https://updates.jenkins-ci.org/download/war/ Version: = 2.251 and = LTS 2.235.3 Tested on: any CVE : CVE-2020-2229 References:...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.4.27 openshift-jenkins-2-container security update
An update for openshift-jenkins-2-container is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 7 : OpenShift Container Platform 4.5.13 jenkins (RHSA-2020:3841)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3841 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.5.13 jenkins security update
An update for jenkins is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...