75 matches found
CVE-2021-2257
Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway component: Management Console. The supported version that is affected is Prior to 16.3.1.4.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...
CVE-2021-2257
CVE-2021-2257 affects Oracle Storage Cloud Software Appliance (Storage Gateway, Management Console) with a vulnerable version prior to 16.3.1.4.2. A high-privilege attacker who has network access via HTTP can compromise the Oracle Storage Cloud Software Appliance and may read a subset of accessib...
CVE-2020-2257
Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...
CVE-2020-2257
Jenkins Validating String Parameter Plugin (versions ≤ 2.4) contains a stored XSS vulnerability due to insufficient escaping of user-controlled fields (including regular expressions in tooltips, names, and descriptions). Exploitation requires Job/Configure permission. A fix is available in versio...
CVE-2013-2257
CVE-2013-2257 affects Cryptocat prior to version 2.0.42. The issue is described as a Group Chat ECC Private Key Generation Brute Force Weakness, indicating weakness in how ECC private keys for group chats are generated. The public descriptions in connected records consistently reference Cryptocat
CVE-2019-2257
CVE-2019-2257 involves wrong permissions in a configuration file, enabling unauthorized permissions on numerous Qualcomm Snapdragon platforms. Affected families include Snapdragon Auto, Connectivity, Consumer IoT, Industrial IoT, IoT, Mobile, Voice & Music, Wearables, and related configurations a...
CVE-2018-2257
CVE-2018-2257 entry is rejected and not used as an active vulnerability entry.
forum18.org XSS vulnerability
Open Bug Bounty ID: OBB-620111 Description| Value ---|--- Affected Website:| forum18.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-2257
CVE-2017-2257 : Cybozu Garoon versions 3.0.0 to 4.2.5 are affected by a cross-site scripting vulnerability in the mail function, allowing an attacker to inject arbitrary web script or HTML. Multiple connected sources (NVD listing and OpenVAS entry for Cybozu Garoon 3.0.0 – 4.2.5) corroborate this...
JVN#63564682: Multiple vulnerabilities in Cybozu Garoon
Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Denial-of-service DoS vulnerability in the application menu's edit function CWE-20 - CVE-2017-2254 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H| Base Score: 5.5 CVSS...
CVE-2016-2257
CVE-2016-2257 is rejected and not used; it does not represent an active vulnerability entry.
CVE-2012-2257
CVE-2012-2257 entry is rejected/not used and does not represent an active vulnerability.
Debian Security Advisory DSA 2257-1 (vlc)
The remote host is missing an update to vlc announced via advisory DSA 2257-1. OpenVAS Vulnerability Test $Id: deb22571.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2257-1 vlc Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
CVE-2011-2257
CVE-2011-2257 is described as an unspecified vulnerability in the Database Target Type Menus component of Oracle Database Server (versions 10.1.0.5, 10.2.0.x, 11.1.0.x, 11.2.0.x) and Oracle Enterprise Manager Grid Control (10.1.0.6, 10.2.0.5, 11.1.0.1). The reports state that remote attackers can...
CVE-2010-2257
Pay Per Minute Video Chat Script 2.0/2.1 suffers a SQL injection in index_ie.php via the page parameter, allowing remote attackers to execute arbitrary SQL commands. The CVE entry lists this vulnerability with a high base score (7.5) under NVD metrics. Exploitation details (specific proofs-of-con...
CVE-2009-2257
The CVE concerns Netgear DG632, firmware 3.4.0_ap. The administrative web interface can be bypassed by direct requests to several HTML assets (gateway/commands/saveconfig.html, stattbl.htm, modemmenu.htm, onload.htm, form.css, utility.js, and possibly indextop.htm in html/), enabling remote authe...
