129 matches found
RHEL 8 : polkit (RHSA-2021:2238)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2238 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...
Oracle Linux 8 : polkit (ELSA-2021-2238)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2238 advisory. 0.115-11.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.115-11.1 - early disconnection from D-Bus results in privilege esc. - Resolves:...
CVE-2021-2238
Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite component: Process Operations. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle MES for...
CVE-2021-2238
CVE-2021-2238 affects Oracle MES for Process Manufacturing (Oracle E-Business Suite, component: Process Operations) and is exploitable in affected 12.1.3 with network access via HTTP. The issue allows a low-privilege attacker to create, delete, or modify data across Oracle MES for Process Manufac...
CVE-2020-2238
The CVE-2020-2238 issue affects the Jenkins Git Parameter Plugin, where versions up to 0.9.12 do not escape the repository field on the Build with Parameters page, enabling a stored XSS vulnerability exploitable by attackers with Job/Configure permissions. Connected sources confirm the root cause...
Debian: Security Advisory (DLA-2238-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2238-1 : libupnp security update
libupnp, the portable SDK for UPnP Devices allows remote attackers to cause a denial of service crash via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/servicetable/servicetable.c. This crash can be...
RHEL 7 : java-1.7.1-ibm (RHSA-2020:2238)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2238 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IB...
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization...
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization...
CVE-2012-2238
CVE-2012-2238 affects trytond 2.4: ModelView.button fails to validate authorization. Root cause is lack of proper authorization checks on that component. CVSS2 base score 5.0 (I:P) and CVSS3.1 base score 7.5 (I:H) indicate partial integrity impact under a network attack with low complexity and no...
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization...
CVE-2019-2238
Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leading to buffer underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...
CVE-2019-2238
Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leading to buffer underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...
CVE-2019-2238
CVE-2019-2238 affects Qualcomm Snapdragon platforms (wide range of Snapdragon Auto/Compute/Connectivity/IOT/Industrial IOT and related SoCs) where a missing data-type check can cause a loop to evaluate true with a potentially negative index, leading to a buffer underflow. CVSS metrics in NVD indi...
CVE-2018-2238
This CVE-2018-2238 entry is rejected/not used and does not represent an active vulnerability.
CVE-2014-2238
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/mantisbtadminsqli.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:27+00:00| seen|...
CVE-2017-2238
Cross-site request forgery CSRF vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2017-2238
CVE-2017-2238 is a CSRF vulnerability in Toshiba Home gateway HEM-GW16A (firmware HEM-GW16A-FW-V1.2.0 and earlier) and HEM-GW26A (firmware HEM-GW26A-FW-V1.2.0 and earlier) that enables remote attackers to hijack administrator authentication via unspecified vectors. The issue is documented in mult...