66 matches found
CVE-2022-2282
The CVE-2022-2282 entry is rejected; this candidate should not be used.
CVE-2022-2282
Removed by vendor...
Mageia: Security Advisory (MGASA-2021-0197)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2282
CVE-2019-2282 is rejected/not used and does not represent an active vulnerability entry.
openSUSE: Security Advisory for virtualbox (openSUSE-SU-2021:0977-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Oracle VirtualBox Security Update (cpuapr2021) - Windows
Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...
openSUSE: Security Advisory for virtualbox (openSUSE-SU-2021:0723-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-2282
CVE-2021-2282 affects Oracle VM VirtualBox Core, with vulnerable versions before 6.1.20. The issue enables information disclosure or unauthorized data access when an unauthenticated user logs on to the infrastructure where VirtualBox runs. The practical impact is access to critical data or all Vi...
KLA12160 Multiple vulnerabilities in Oracle VirtualBox
Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A security bypass vulnerability in Core component can...
CVE-2020-2282
Jenkins Implied Labels Plugin 0.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to configure the plugin...
CVE-2020-2282
CVE-2020-2282 affects Jenkins’ Implied Labels Plugin (versions ≤ 0.6). The issue is a missing permission check on an HTTP endpoint, which allows attackers with Overall/Read permission to reconfigure the plugin. The problem is fixed in version 0.7, which enforces that only users with Overall/Admin...
CVE-2020-2282
Jenkins Implied Labels Plugin 0.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to configure the plugin...
CVE-2018-2282
CVE-2018-2282 is rejected/not used; this entry does not represent an active vulnerability.
RHEL 6 : chromium-browser (RHSA-2018:2282)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:2282 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 68.0.3440.75. Security Fixes:...
CVE-2017-2282
CVE-2017-2282 is a buffer overflow in the I-O DATA WN-AX1167GR wireless router firmware (versions 3.00 and earlier). The root cause is a buffer overflow in the device’s firmware that allows an attacker connected to the network to execute arbitrary commands on the device. Public sources (e.g., JVN...
JVN#01312667: Multiple vulnerabilities in I-O DATA WN-AX1167GR
WN-AX1167GR provided by I-O DATA DEVICE, INC. is a wireless LAN router. WN-AX1167GR contains multiple vulnerabilities listed below. Hard-coded credentials CWE-798 - CVE-2017-2280 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.8 CVSS v2|...
CVE-2016-2282
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...
CVE-2016-2282
CVE-2016-2282 affects Moxa ioLogik E2200 series (pre-3.12) and the ioAdmin Configuration Utility (pre-3.18). The root cause is insufficient encryption of credentials, allowing remote attackers to obtain cleartext via unspecified vectors. Exploits are publicly available per ICS-CERT and the adviso...