85 matches found
CVE-2022-2260
The CVE-2022-2260 entry concerns the GiveWP WordPress plugin (versions prior to 2.21.3) with CSRF protection missing when exporting data and unvalidated export parameters (e.g., dates). This can allow a logged-in admin to cause a DoS by the plugin repeatedly querying the database, overwhelming CP...
openSUSE: Security Advisory for qemu (SUSE-SU-2022:2260-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE: Security Advisory (SUSE-SU-2022:2260-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Scientific Linux Security Update : libwebp on SL7.x i686/x86_64 (2021:2260)
The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2260-1 advisory. - libwebp: heap-based buffer overflow in PutLE16 CVE-2018-25011 - libwebp: heap-based buffer overflow in WebPDecodeInto functions CVE-2020-36328 ...
Oracle Linux 7 : libwebp (ELSA-2021-2260)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2260 advisory. 0.3.0-10 - Added fixes for rhbz1956829, rhbz1956843, rhbz1956919 Tenable has extracted the preceding description block directly from the Oracle Linux...
RHEL 7 : libwebp (RHSA-2021:2260)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2260 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...
CVE-2021-2260
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: iRecruitment. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful...
CVE-2021-2260
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: iRecruitment. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful...
CVE-2021-2260
The CVE-2021-2260 entry applies to Oracle E-Business Suite, specifically the Oracle Human Resources component iRecruitment in version 12.1.3. The vulnerability allows a low-privileged attacker who can reach the system over HTTP via the network to compromise Oracle Human Resources, enabling unauth...
CVE-2021-2260
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: iRecruitment. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful...
CVE-2020-2260
A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials...
CVE-2020-2260
A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials...
CVE-2020-2260
CVE-2020-2260 affects Jenkins Perfecto Plugin (versions 1.17 and earlier). A missing permission check in the connection-test method allows attackers with Overall/Read to connect to an attacker-specified HTTP URL using attacker-specified credentials, exposing potential abuse. Public advisories (GH...
Debian DLA-2260-1 : mcabber security update
It was discovered that there was a 'roster push attack' in mcabber, a console-based Jabber XMPP client. This is identical to CVE-2015-8688 for gajim. For Debian 8 'Jessie', this problem has been fixed in version 0.10.2-1+deb8u1. We recommend that you upgrade your mcabber packages. NOTE: Tenable...
CVE-2013-2260
CVE-2013-2260 concerns Cryptocat before 2.0.22, with an entropy weakness in the Cryptocat.random() Function Array Key. The connected documents consistently describe this entropy weakness; explicit exploitation details or mitigations are not provided in the sources.
CVE-2019-2260
The CVE-2019-2260 entry describes a race condition in perf-event processing that can lead to a use-after-free condition affecting Qualcomm Snapdragon platforms (various Auto/Compute/IoT lines). Concrete details from connected documents identify the vulnerable component(s) as Qualcomm Snapdragon k...
