145 matches found
CVE-2024-2315 SMM arbitrary code execution in Overclock
APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability...
CVE-2024-2315
CVE-2024-2315 concerns AMI AptioV BIOS firmware with an issue labeled as an improper access control vulnerability in the BIOS that could allow a local attacker to modify SPI flash and trigger BIOS boot kit launches, potentially affecting availability and, to a lesser extent, integrity according t...
CVE-2019-2315
creationtimestamp| type| source ---|---|--- 2024-01-09 06:36:41+00:00| seen| https://t.me/ctinow/164812...
Amazon Linux 2 : java-11-amazon-corretto (ALAS-2023-2315)
The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.21+9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2315 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE component: JSSE. Supporte...
CVE-2023-2315
Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...
CVE-2023-2315
CVE-2023-2315 is a path traversal vulnerability in OpenCart versions 4.0.0.0–4.0.2.2. An authenticated user with access/modify privileges on the Log component can empty arbitrary files on the server. Root cause: path traversal in the Log component. Impact: file deletion/emptiness on the server as...
CVE-2023-2315 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2
Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...
CVE-2022-2315
Database Software Accreditation Tracking/Presentation Module product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2...
CVE-2022-2315 SQL Injection in Database Accreditation System
Database Software Accreditation Tracking/Presentation Module product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2...
CVE-2022-2315
CVE-2022-2315 affects the DataBank Database Software Accreditation Tracking/Presentation Module prior to version 2. The root cause is an unauthenticated SQL Injection vulnerability in the module, allowing arbitrary SQL execution without authentication. Per published metrics, the vulnerability is ...
Oracle HTTP Server (Apr 2021 CPU)
The 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0 versions of HTTP Server installed on the remote host are affected by a vulnerability as referenced in the April 2021 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-In product of Oracle Fusion Middleware component: SSL Module Dell...
CVE-2021-2315
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Web Listener. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2021-2315
CVE-2021-2315 affects Oracle HTTP Server (Web Listener) in Oracle Fusion Middleware. Affected versions: 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. Description: unauthenticated attackers can access via HTTP and may compromise data, with possible unauthorized update/insert/delete and read access. Exploita...
SmartISoft phpBazar Remote Code Execution (CVE-2010-2315)
A remote code execution vulnerability exists in SmartISoft phpbazar. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2020-2315
Jenkins Visualworks Store Plugin 1.1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2020-2315
The CVE-2020-2315 issue affects Jenkins Visualworks Store Plugin versions 1.1.3 and earlier. The root cause is that the plugin’s XML parser does not disable XML External Entity (XXE) processing, enabling crafted XML to potentially reveal secrets from the Jenkins controller or facilitate SSRF-like...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2016-1009)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2315
CVE-2019-2315 concerns a data handling issue in Snapdragon SoCs where parameters populated during a copy operation from a non-secure environment to a secure buffer can be exposed or mishandled. The description consistently cites copying from an fd or local buffer to a secure buffer with inputs fr...