88 matches found
hofapotheke-wuerzburg.de Improper Access Control vulnerability OBB-3767500
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-2338 SQL Injection in pimcore/pimcore
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-2338
The CVE-2023-2338 entry affects pimcore/pimcore versions prior to 10.5.21. The vulnerability is a SQL Injection in the AssetController caused by unsanitized string concatenation in a where clause, enabling an attacker to dump/alter data or cause DoS on the backend database. Remediation: upgrade t...
CVE-2016-2338
creationtimestamp| type| source ---|---|--- 2022-09-29 07:40:58+00:00| seen| https://t.me/cibsecurity/50651 2026-06-23 22:37:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moyhn2pwgj2y...
CVE-2022-2338
Softing Secure Integration Server V1.22 is affected by an authentication bypass vulnerability caused by cleartext transmission over HTTP that enables a machine-in-the-middle attack to capture a session cookie and authenticate to the server. Affected components include Secure Integration Server an...
SUSE: Security Advisory (SUSE-SU-2022:2338-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerabilities in Strongswan affect Power Hardware Management Console (CVE-2014-9221,CVE-2014-2891,CVE-2014-2338,CVE-2013-5018)
Summary Strongswan is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2014-9221 DESCRIPTION: strongSwan is vulnerable to a denial of service, caused by a NULL pointer dereference when handling malicious payloads. A remote...
CVE-2021-2338
CVE-2021-2338 affects Oracle Siebel CRM, specifically the Siebel Apps - Marketing component (Email Marketing Stand-Alone). Affected versions are 21.5 and prior. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing, with user inter...
SUSE: Security Advisory (SUSE-SU-2014:0529-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2015:2338-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : bind (RHSA-2020:2338)
"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2338 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C...
Oracle Linux 8 : bind (ELSA-2020-2338)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2338 advisory. - Limit number of queries triggered by a request CVE-2020-8616 Tenable has extracted the preceding description block directly from the Oracle Linux...
[SECURITY] [DLA 2158-1] ruby2.1 security update
Package : ruby2.1 Version : 2.1.5-2+deb8u9 CVE ID : CVE-2016-2338 An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructe...
CVE-2016-2338
An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array...
CVE-2016-2338
CVE-2016-2338 describes an exploitable heap overflow in Ruby’s Psych::Emitter.start_document where head is allocated based on the tags array length; specially crafted objects in tags can cause the allocation to exceed bounds. Connected advisories confirm this vulnerability and show the fix in Rub...
CVE-2019-2338
CVE-2019-2338 describes a vulnerability in Qualcomm Snapdragon firmware where a crafted image signed by a non-QC entity can be loaded and read/write memory in the secure world across multiple Snapdragon family devices (Auto, Compute, Connectivity, etc.). Root cause is improper validation of image...
CVE-2019-2338
Crafted image that has a valid signature from a non-QC entity can be loaded which can read/write memory that belongs to the secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...
CVE-2018-2338
CVE-2018-2338 is rejected/not used and does not represent an active vulnerability entry.
Ruby Psych::Emitter start_document Heap Overflow Vulnerability(CVE-2016-2338)
DESCRIPTION An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase...
Ruby pack_pack Use After Free Vulnerability(CVE-2016-2338)
DESCRIPTION An exploitable User After Free vulnerability exists in the packpack function of Ruby. In packpack function each element of array which should be "pack", based on template string is converted to binary representation in proper way. If element is not compatible with corresponding to him...