82 matches found
CVE-2020-2243
Jenkins Cadence vManager Plugin 3.0.4 and earlier is affected by CVE-2020-2243: it does not escape build descriptions in tooltips, causing a stored XSS vulnerability that can be exploited by attackers with Run/Update permission. Several connected sources confirm the issue and note that Cadence vM...
app.timetom.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1157532 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2010-2243
creationtimestamp| type| source ---|---|--- 2019-11-07 20:28:29+00:00| seen| https://t.me/cibsecurity/7977...
CVE-2010-2243
CVE-2010-2243 applies to the Linux kernel code path kernel/time/clocksource.c on non-GENERIC_TIME systems; triggering an OOPS when reading /sys/devices/system/clocksource/clocksource0/current_clocksource. The vulnerability is described for kernels before version 2.6.34. Connected sources confirm ...
CVE-2019-2243
CVE-2019-2243 describes a possible buffer overflow at the end of an iteration when retrieving version information, potentially leading to information disclosure. Affected components are Qualcomm Snapdragon family (across numerous Snapdragon Auto/Compute/IoT lines and related SoCs listed in the de...
CVE-2019-2243
Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...
CVE-2018-2243
CVE-2018-2243 is rejected/not used; this CVE is not an active vulnerability entry.
CVE-2017-2243
CVE-2017-2243 targets the WordPress plugin Responsive Lightbox (dFactory). The vulnerability is a cross-site scripting flaw in versions before 1.7.2, described as a reflected XSS (CWE-79) with the ability to inject arbitrary script/HTML via unspecified vectors. Multiple sources (NVD, JVN/JVND, CV...
CVE-2008-2243
CVE-2008-2243 is rejected; this entry does not represent an active vulnerability.
CVE-2016-2243
Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service BIOS recovery failure by leveraging administrative access...
CVE-2016-2243
Summary: CVE-2016-2243 concerns the Sure Start BIOS recovery on certain HP Commercial PCs (2015) that can be exploited locally by an administrator/root to cause a denial of service (BIOS recovery failure). What is affected: Sure Start implementation on listed HP 2015 commercial platforms (HP ZBoo...
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2243-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2243-1 advisory. Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden, Kyle Huey, Jesse Ruderman, Gregor Wagner,...
Fedora Update for mediawiki FEDORA-2014-3344
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mediawiki FEDORA-2014-3338
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MediaWiki 'theloadFromSession'函数信息泄露漏洞
BUGTRAQ ID：65883 CVE ID：CVE-2014-2243 MediaWiki是一款Wiki程序。 MediaWiki的includes/User.php脚本'theloadFromSession'函数存在安全漏洞。远程攻击者可通过实施暴力破解攻击利用该漏洞获取会话令牌的访问权限。 0 MediaWiki Mediawiki 2.0.18 MediaWiki Mediawiki = 1.19.11 MediaWiki Mediawiki 1.20.x MediaWiki Mediawiki 1.21.x1.21.6 MediaWiki Mediawiki...
DEBIAN-CVE-2014-2243
includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timin...
Fedora Update for moodle FEDORA-2013-12964
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for moodle FEDORA-2013-12950
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...