CVE-2022-2241

The CVE concerns the WordPress plugin Featured Image from URL (FIFU) prior to version 4.0.1 . The root cause is absence of CSRF checks when updating settings, which could let a logged-in attacker coerce an admin into changing settings via CSRF. Additionally, insufficient validation/sanitisation/e...

CVE-2022-2241 Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF

The Featured Image from URL FIFU WordPress plugin before 4.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of validation, sanitisation and escaping in some of them, ...

Schweitzer Engineering Laboratories RTAC Improper Input Validation (CVE-2013-2792)

Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Mageia: Security Advisory (MGASA-2015-0127)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2241-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2241

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2021-2241

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2021-2241

CVE-2021-2241 affects Oracle iStore in Oracle E-Business Suite (Shopping Cart component) and is listed for affected versions 12.1.1–12.1.3. The Red Hat, CNVD, CNNVD, NVD, PRION, and other feeds confirm that a low-privilege attacker with network access over HTTP can compromise Oracle iStore, enabl...

CVE-2020-2241

A cross-site request forgery CSRF vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials...

CVE-2020-2241

The CVE-2020-2241 entry describes a CSRF vulnerability in Jenkins Database Plugin versions 1.6 and earlier that lets attackers connect to an attacker-controlled database server using attacker-specified credentials. The issue stems from insufficient CSRF protection in the affected form validation,...

Selinc Sel-2241 Improper Input Validation

Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow physically proximate attackers to cause a denial of service infinite loop via crafted input over a serial line. File data ot500220.nasl...

Selinc Sel-2241 Improper Input Validation

Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet. File data ot500143.nasl...

CVE-2019-2241

CVE-2019-2241 affects Qualcomm Snapdragon firmware across numerous Snapdragon Auto, Compute, Connectivity, and IoT platforms (e.g., MDM9150/MDM9607/SDX24/SD 210–SD 855 family). The root cause is improper error status checks and incorrect status handling during layout background rendering, leading...

CVE-2018-2241

CVE-2018-2241 is rejected/not used and does not represent an active vulnerability entry.

CentOS Update for java CESA-2018:2241 centos6

Check the version of java SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882929";...

CVE-2017-2241

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service"...

CVE-2017-2241

Hammock AssetView for MacOS up to version 9.2.0 is affected by a SQL injection vulnerability in the File Transfer Web Service. The vulnerability allows a remote attacker to execute arbitrary SQL commands against the AssetView database. The issue is documented across multiple sources (e.g., CNVD-2...

Oracle: Security Advisory (ELSA-2015-2241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2241

Cross-site scripting XSS vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonlyfields, as demonstrated by a @property...

CVE-2015-2241

CVE-2015-2241 is an XSS vulnerability in Django’s admin.contents (admin/helpers.py) where ModelAdmin.readonly_fields can be tricked via a model attribute demonstrated by a @property. Affected: Django before 1.7.6 and 1.8 before 1.8b2. Impact: remote script/HTML injection in admin UI. Remediation:...