73 matches found
Debian: Security Advisory (DLA-2303-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2303
CVE-2019-2303 concerns the Qualcomm SNDCP module and related Snapdragon components. The issue is described as the module potentially accessing memory outside its boundary when handling malformed XID messages, potentially leading to memory corruption (buffer/heap overflow) in GSNDCP. Affected plat...
CVE-2018-2303
This CVE-2018-2303 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-2303
CVE-2017-2303 affects Juniper Junos OS when RIP is enabled. The vulnerability arises from how RIP advertisements are processed by the routing protocol daemon (rpd), allowing certain crafted RIP updates to crash rpd and cause a denial-of-service condition. Affected Junos versions include 12.1X46 b...
bayt.com XSS vulnerability
Vulnerable URL: https://www.bayt.com/fr/specialties/search/"/ Details: Description| Value ---|--- Patched:| Yes, at 07.06.2017 Latest check for patch:| 07.06.2017 19:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2303 VIP website status:| Yes Check bayt.com...
CVE-2016-2303
CVE-2016-2303: Ecava IntegraXor before 5.0 build 4522 is vulnerable to CRLF injection in HTTP headers, enabling HTTP response splitting via a crafted URL. Affected product: Ecava IntegraXor HMI web server (pre-5.0 build 4522). Root cause: improper neutralization of CRLF sequences in HTTP header h...
CVE-2015-2303
CVE-2015-2303 is rejected/not used per description; reference CVE-2014-6406 instead.
[RT-SA-2014-005] SQL Injection in webEdition CMS File Browser Installer Script
Advisory: SQL Injection in webEdition CMS File Browser RedTeam Pentesting discovered an SQL injection vulnerability in the file browser component of webEdition CMS during a penetration test. Unauthenticated attackers can get read-only access on the SQL database used by webEdition and read for...
CVE-2014-2303
The CVE-2014-2303 issue affects webEdition CMS, specifically the file browser component we_fs.php. It describes SQL injection via the GET parameters table and order that can be exploited to execute arbitrary SQL, with unauthenticated attackers potentially reading the CMS’s database (including pas...
webEdition CMS 6.3.8.0 svn6985 SQL Injection
Advisory: SQL Injection in webEdition CMS File Browser RedTeam Pentesting discovered an SQL injection vulnerability in the file browser component of webEdition CMS during a penetration test. Unauthenticated attackers can get read-only access on the SQL database used by webEdition and read for...
CVE-2014-2303
creationtimestamp| type| source ---|---|--- 2014-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39206...
CVE-2013-2303
SLEIPNIR for Windows (4.0.0.4000 and earlier) is affected by a vulnerability that allows spoofing of the SSL lock icon and address-bar colors, potentially misleading users about SSL use. The issue is described across multiple sources (NVD, JVN, Red Hat, CVE records) as a vulnerability in Sleipnir...
CVE-2012-2303
The issue CVE-2012-2303 affects the Drupal Spaces module (Spaces and Spaces OG) for Drupal 6.x-3.x, with prior to 6.x-3.4 vulnerable. Root cause: permissions are not enforced on non-object pages, enabling remote disclosure of sensitive information via unspecified vectors to the Spaces modules. Im...
SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access Bypass
CVE: CVE-2012-2303 Spaces is an API module intended to make configuration options generally avaliable only at the sitewide level to be configurable and overridden by individual "spaces" on a Drupal site. The spaces and spacesog modules part of the spaces package in some cases do not apply the...
CVE-2011-2303
Summary: CVE-2011-2303 describes an unspecified vulnerability in Oracle Application Object Library (Oracle E-Business Suite) affecting 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3. It allows remote authenticated users to affect integrity via unknown vectors related to attachments/file upload. The provid...
CVE-2010-2303
CVE-2010-2303 is rejected/not used; reference CVE-2010-1772 instead.
CVE-2009-2303
CVE-2009-2303 affects Aardvark Topsites PHP 5.2.1 and earlier. The vulnerability resides in index.php during a search action, where a negative integer value for the start parameter can trigger an error message that reveals the installation path. This leads to an information disclosure risk (parti...