86 matches found
CVE-2023-2325 Stored XSS Vulnerability in M-Files Classic Web
Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document...
CVE-2023-2325 Stored XSS Vulnerability in M-Files Classic Web
Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document...
CVE-2023-2325
CVE-2023-2325 affects M-Files Classic Web: Stored XSS that allows script execution in a user’s browser via stored HTML documents. Vulnerable on Classic Web before 23.10, LTS SR versions before 23.2 LTS SR4 and before 23.8 LTS SR1. Mitigation: upgrade to 23.10 or later (Classic Web), 23.2 LTS SR4 ...
K16983: PCRE library vulnerability CVE-2015-2325
Security Advisory Description PCRE library is prone to a heap overflow vulnerability. Due to insufficient bounds checking inside compilebranch, the heap memory could be overflowed via a crafted regular expression. Since PCRE library is widely used, this vulnerability should affect many applicatio...
MariaDB 10.0.0 < 10.0.18 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.18 advisory. - The compilebranch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of...
CVE-2022-2325
creationtimestamp| type| source ---|---|--- 2022-08-01 16:17:02+00:00| seen| https://t.me/cibsecurity/47322...
CVE-2022-2325
CVE-2022-2325 affects the Invitation Based Registrations WordPress plugin (versions ≤ 2.2.84). The vulnerability arises because the plugin does not sanitize and escape certain settings, enabling Stored Cross-Site Scripting when unfiltered_html is disallowed (e.g., multisite). This can allow high-...
openSUSE: Security Advisory for resource-agents (SUSE-SU-2022:2325-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:2325-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:2325-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2325
The compilebranch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service out-of-bounds heap read and crash, or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large...
CVE-2015-2325
The compilebranch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service out-of-bounds heap read and crash, or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large...
CVE-2015-2325
CVE-2015-2325 is a PCRE vulnerability where the compile_branch() function performs improper bounds checks, enabling a heap-based buffer overflow via a crafted regular expression (group with a forward reference repeated many times in an outer group with zero minimum quantifier). Affected: PCRE lib...
CVE-2019-2325
Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150...
CVE-2019-2325
CVE-2019-2325 affects a wide range of Qualcomm Snapdragon components (Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/IoT/Mobile/Voice & Music/Wearables) across multiple platforms (MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, and various SD/SDM/SDA/SDX ser...
Arbitrary Code Execution
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
CVE-2018-2325
CVE-2018-2325 entry is rejected/not used and does not represent an active vulnerability.
PHP 5.6.x < 5.6.10 Multiple Vulnerabilities
According to its banner, the version of PHP 5.6.x running on the remote web server is prior to 5.6.10. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist in the bundled Perl-Compatible Regular Expression PCRE library due to improper validatio...
CVE-2017-2325
A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service...