118 matches found
CVE-2022-2324
SonicWall Hosted Email Security (HES) is affected. Versions prior to 10.0.17.7319 contain an improperly implemented security check in the Capture ATP feature, enabling bypass of the Capture ATP security service. The issue could be exploited by an unauthenticated attacker to bypass security contro...
SonicWall Hosted Email Security Capture ATP Bypass
Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. CVE: CVE-2022-2324 Last updated: July 14, 2022, 6:43 p.m...
Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2021-2324)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2324
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Loans And Deposits. Supported versions that are affected are 12.0-12.4, 14.0-14.4 and . Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...
CVE-2021-2324
The CVE-2021-2324 entry concerns Oracle FLEXCUBE Universal Banking (Loans and Deposits). Affected supported versions are 12.0–12.4 and 14.0–14.4. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data, with exploitation requiring user interaction. Impac...
SUSE: Security Advisory (SUSE-SU-2021:2324-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Advisory ROSA-SA-2021-1819
Software: cvs 1.11.23 OS: Cobalt 7.9 CVE-ID: CVE-2020-2324 CVE-Crit: HIGH CVE-DESC: The Jenkins CVS 2.16 and earlier plug-in does not configure its XML syntactic parser to prevent attacks on XML external objects XXE. CVE-STATUS: default CVE-REV: default...
CVE-2020-2324
creationtimestamp| type| source ---|---|--- 2020-12-03 18:25:15+00:00| seen| https://t.me/cibsecurity/17090...
CVE-2020-2324
Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2020-2324
The CVE-2020-2324 issue affects Jenkins CVS Plugin versions 2.16 and earlier. The root cause is that the plugin’s XML parser does not disable XML External Entity (XXE) processing, enabling an attacker who can control an agent process to have Jenkins parse a crafted changelog file that can exfiltr...
CVE-2020-2324
Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2016-1009)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2324
CVE-2019-2324 affects Qualcomm Snapdragon devices where ADSP can be compromised, causing the audio port index returned by ADSP to be out of bounds and trigger out-of-bound access across a wide range of Snapdragon products (Auto, Connectivity, IoT, Wearables, and other SKUs). Root cause is an inte...
GE ST-2324 RSTi Slice 4 Points Detection
Binary data 755586.prm...
CVE-2018-2324
CVE-2018-2324 is rejected/not used and does not represent an active vulnerability entry.
lighttpd < 1.4.35 Multiple Vulnerabilities
According to its banner, the version of lighttpd running on the remote host is prior to 1.4.35. It is, therefore, affected by the following vulnerabilities : - A SQL injection flaw exists in the 'modmysqlvhost' module where user input passed using the hostname is not properly sanitized. A remote...
Security Bulletin: Vulnerabilities in git affect PowerKVM (CVE-2016-2315, CVE-2016-2324)
Summary PowerKVM is affected by vulnerabilities in git. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2016-2315 DESCRIPTION: GIT is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. By pushing a specially-crafted repository, a remote...
CVE-2015-2324
CVE-2015-2324 is a Cross-Site Scripting (XSS) vulnerability in the WordPress Photo Gallery plugin’s filemanager, affecting versions before 1.2.13. The issue permits remote authenticated users with edit permission to inject arbitrary web script or HTML via unspecified vectors. Exploitation details...
EulerOS 2.0 SP1 : git (EulerOS-SA-2016-1009)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer truncation flaw and an integer overflow flaw, both leading to a heap-based buffer overflow, were found in the way Git processed certain...