66 matches found
MINI-2282-Q485-8H3Q
Bulletin has no description...
EUVD-2026-2282
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security5g parameter of the sub4CA50 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
EUVD-2006-2282
Malware in sbrugna...
EUVD-2023-2282
Malicious code in bioql PyPI...
CVE-2023-2282
Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass administrator-enforced Web Login restrictions and gain access to entries via an unexpected vector...
CVE-2021-2282
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...
CVE-2009-2282
The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms in Sun Solaris 10, and OpenSolaris snv41 through snv108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown...
CVE-2024-2282
creationtimestamp| type| source ---|---|--- 2024-03-08 06:51:53+00:00| seen| https://t.me/ctinow/203076...
CVE-2024-2282
A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component Login Page. The manipulation of the argument useremail leads to sql injection. The attack may be initiated...
CVE-2024-2282
A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component Login Page. The manipulation of the argument useremail leads to sql injection. The attack may be initiated...
CVE-2024-2282 boyiddha Automated-Mess-Management-System Login Page index.php sql injection
A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component Login Page. The manipulation of the argument useremail leads to sql injection. The attack may be initiated...
CVE-2024-2282 boyiddha Automated-Mess-Management-System Login Page index.php sql injection
A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component Login Page. The manipulation of the argument useremail leads to sql injection. The attack may be initiated...
CVE-2024-2282
CVE-2024-2282 affects boyiddha Automated-Mess-Management-System 1.0. The vulnerability is a SQL injection in the Login Page’s /index.php caused by manipulation of the useremail argument. Impact is high/critical per sources, with remote exploitation and public disclosure. Multiple connected source...
Moxa ioLogik E2200 Series Insufficiently Protected Credentials (CVE-2016-2282)
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors. This plugin only works with Tenable.ot. Please visit...
Oracle Linux 9 : podman (ELSA-2023-2282)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2282 advisory. - rebuild to fix CVE-2022-30629 - rebuilt with golang = 1.17.5 CVE-2021-44716, CVE-2021-44717 Tenable has extracted the preceding description block...
CVE-2023-2282
Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass administrator-enforced Web Login restrictions and gain access to entries via an unexpected vector...
CVE-2023-2282
Devolutions Remote Desktop Manager suffers improper access control in the Web Login listener (affecting 2023.1.22 and earlier). An authenticated user can bypass administrator-imposed Web Login restrictions and access restricted entries via an unexpected vector. The NVD CVE entry lists a MEDIUM/LO...
CVE-2022-2282
creationtimestamp| type| source ---|---|--- 2022-07-01 16:39:32+00:00| seen| https://t.me/cibsecurity/45472...
CVE-2022-2282
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2022-2282
...