130 matches found
GitLab 12.4 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-2270)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions starting from 15.1 before 15.1.1. GitLab wa...
CVE-2022-2270
GitLab CVE-2022-2270 affects GitLab installations where versions are 12.4 before 14.10.5, 15.0 before 15.0.4, or 15.1 before 15.1.1. The issue is that Conan package names were leaked due to incorrect permissions verification. The vulnerability is disclosed in the CVE record and related sources; n...
CVE-2022-2270
Removed by vendor...
Mageia: Security Advisory (MGASA-2014-0162)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:1445-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:0670-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2270
Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite component: Sites. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful attacks of this...
CVE-2021-2270
CVE-2021-2270 describes a vulnerability in Oracle E-Business Suite, specifically the Oracle Site Hub component. The connected sources confirm affected versions 12.1.1–12.1.3 and indicate an easily exploitable flaw that allows a low-privileged, unauthenticated attacker with network access via HTTP...
CVE-2020-2270
Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in badge tooltip, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...
CVE-2020-2270
CVE-2020-2270 affects the Jenkins ClearCase Release Plugin (versions 0.3 and earlier). The root cause is that the composite baseline in the badge tooltip is not escaped, causing a stored XSS vulnerability. Exploitation is feasible by attackers with Job/Configure permission. Remediation: upgrade t...
SUSE SLES12 Security Update : php72 (SUSE-SU-2019:2270-1)
This update for php72 fixes the following issues : Security issues fixed : CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095. Note that Tenable Network Security has extracted the preceding...
PRODSECBUG-2270: Reflected cross-site scripting in the admin panel
More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23...
CVE-2018-2270
CVE-2018-2270 is rejected/not used and does not represent an active vulnerability entry.
Hardcoded credentials
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded...
CVE-2017-2270
The CVE-2017-2270 issue affects FileCapsule Deluxe Portable and its Encrypted files in self-decryption format, with Vulnerability in DLL loading (CWE-427) that can allow arbitrary code execution. Affected versions include FileCapsule Deluxe Portable Ver.2.0.9 and earlier (and related encrypted-se...
JVN#42031953: FileCapsule Deluxe Portable and Encrypted Files in Self-Decryption Format created by FileCapsule Deluxe Portable may insecurely load Dynamic Link Libraries
FileCapsule Deluxe Portable is a file encryption software. FileCapsule Deluxe Portable contains the following vulnerabilities. FileCapsule Deluxe Portable insecurely load Dynamic Link Libraries CWE-427 - CVE-2017-2265, CVE-2017-2267, CVE-2017-2269 Version| Vector| Score ---|---|--- CVSS v3|...
CVE-2011-2270
CVE-2011-2270 entry is rejected/not used and does not represent an active vulnerability.
OracleVM 3.4 : xen (OVMSA-2016-0088) (Bunker Buster)
The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: commit=aff08b43b1a504aa14a0fce65302ccf515b69fdf - Remove unsafe bits from the modl?entry fastpath Andrew Cooper CVE-2016-6258 - x86/mm: fully honor PS bits in guest page table walks Jan...