67 matches found
CVE-2023-2258 Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.io
Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304...
CVE-2023-2258
CVE-2023-2258 affects the Alf.io/alfio-event backend. The flaw is improper neutralization of formula elements in CSV files generated by alf.io, leading to potential CSV Injection when exporting attendee data. The issue impacts versions prior to 2.0-M4-2304 . Connected docs confirm a backend CSV-i...
CVE-2022-2258
CVE-2022-2258 affects Octopus Deploy: a user can view Tagsets without explicit view permissions, indicating an information disclosure vulnerability. The available sources describe the issue but do not specify affected versions, root cause details, exploit information, or a confirmed fix/version. ...
CVE-2022-2258
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items...
SUSE: Security Advisory (SUSE-SU-2017:2258-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2258
Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...
CVE-2021-2258
CVE-2021-2258 affects Oracle E-Business Suite, Oracle Projects UI. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. Description confirms a low-privilege, network-accessible (HTTP) vulnerability in Oracle Projects that can lead to unauthorized create/delete/modify of critical data or access to...
CVE-2020-2258
CVE-2020-2258 affects the Jenkins Health Advisor by CloudBees Plugin (versions
CVE-2020-2258
Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view that HTTP endpoint...
CVE-2019-2258
Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM961...
CVE-2019-2258
CVE-2019-2258: Improper validation of array index causes out-of-bounds write and memory corruption in MMCP within Qualcomm Snapdragon family devices (Auto, Compute, IoT, Wearables, etc.). Impact spans numerous Snapdragon platforms (MDM9xxx, SDX20, SDM6xx/8xx, etc.), across multiple SoCs listed in...
CVE-2019-2258
Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM961...
CVE-2013-2258
Cryptocat before 2.0.22 has Nickname User Impersonation...
CVE-2013-2258
CVE-2013-2258 affects Cryptocat before 2.0.22, described consistently across multiple connected records as allowing Nickname User Impersonation . The available documents identify the affected product and the basic vulnerability class but do not provide detailed root cause, affected components, ex...
RHEL 7 : http-parser (RHSA-2019:2258)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2258 advisory. The http-parser package provides a utility for parsing HTTP messages. It parses both requests and responses. The parser is designed to be us...
CVE-2018-2258
CVE-2018-2258 is rejected and does not represent an active vulnerability entry.
CVE-2017-2258
CVE-2017-2258 affects Cybozu Garoon 4.2.4–4.2.5 and is a directory traversal in the Garoon SOAP API “WorkflowHandleApplications” (CWE-22) that can allow an attacker to read arbitrary files. This vulnerability is documented across multiple feeds (NVD, CVE lists, OpenVAS) with a reported impact of ...
JVN#63564682: Multiple vulnerabilities in Cybozu Garoon
Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Denial-of-service DoS vulnerability in the application menu's edit function CWE-20 - CVE-2017-2254 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H| Base Score: 5.5 CVSS...