132 matches found
Use of Telnet in multiple SICK Flexi Soft and Flexi Classic Gateways
Several versions of the SICK Flexi Soft Gateways FX0-GENT, FX0-GMOD, FX0-GPNT and SICK Flexi Classic Gateway UE410 provide a Telnet interface for debugging, which is enabled by factory default. No password is set in the default configuration. If the password is not set by the customer, a remote...
KLA48769 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in Navigation can be exploit...
CVE-2022-2311
creationtimestamp| type| source ---|---|--- 2022-11-28 16:27:52+00:00| seen| https://t.me/cibsecurity/53559...
CVE-2022-2311 Find and Replace All < 1.3 - Reflected Cross Site Scripting
The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue...
CVE-2022-2311 Find and Replace All < 1.3 - Reflected Cross Site Scripting
The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue...
CVE-2022-2311
The vulnerability CVE-2022-2311 affects the WordPress Find and Replace All plugin prior to version 1.3, where parameters from the plugin’s settings page are not properly sanitized/escaped before being echoed to the user, enabling a reflected Cross-Site Scripting (XSS) attack. The issue is documen...
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2022-2311)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-39280
Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31...
CVE-2021-39280
Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31...
CVE-2021-2311
CVE-2021-2311 affects Oracle Hospitality Inventory Management (Oracle Food and Beverage Applications), specifically the Export to Reporting and Analytics component. The vulnerability impacts version 9.1.0 and allows a low-privileged attacker with network access over HTTP to compromise Oracle Hosp...
CVE-2021-2311
Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications component: Export to Reporting and Analytics. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...
CVE-2020-2311
A missing permission check in Jenkins AWS Global Configuration Plugin 1.5 and earlier allows attackers with Overall/Read permission to replace the global AWS configuration...
CVE-2020-2311
The vulnerability CVE-2020-2311 affects Jenkins AWS Global Configuration Plugin (versions 1.5 and earlier). The root cause is a missing permission check in an HTTP endpoint that processes form submissions, enabling attackers with Overall/Read permission to replace the global AWS configuration. Im...
Debian DLA-2311-1 : zabbix security update
It was discovered that there was a potential cross-site scripting vulnerability via iframe HTML elements in Zabbix, a PHP-based monitoring system. For Debian 9 'Stretch', this problem has been fixed in version 1:3.0.7+dfsg-3+deb9u1. We recommend that you upgrade your zabbix packages. For the...
CVE-2019-2311
The CVE-2019-2311 entry concerns a potential buffer overflow in the WLAN handler due to lack of validation of destination buffer size before copying, affecting Qualcomm Snapdragon products (numerous APQ, MSM, SDM, and related platforms). Root cause: insufficient destination buffer size validation...
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2019-2311)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2311
Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message...
CVE-2015-2311
CVE-2015-2311 affects Sandstorm Cap'n Proto prior to 0.4.1.1 and 0.5.x prior to 0.5.1.1. The issue is an integer underflow in the handling of crafted messages, which may allow remote peers to cause denial of service, leak memory, or potentially execute arbitrary code. Physical impact and exploit ...