66 matches found
CVE-2022-2349
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
Emerson DeltaV Improper Permissions, Privileges, and Access Controls (CVE-2014-2349)
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 allows local users to modify or read configuration files by leveraging engineering-level privileges. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable...
CVE-2019-2349
CVE-2019-2349 entry is rejected/not used; this is not an active vulnerability entry.
CVE-2021-2349
Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...
CVE-2021-2349
CVE-2021-2349 affects Oracle Hyperion Essbase Administration Services (EAS Console). Affected are 11.1.2.4 and 21.2. The flaw allows an unauthenticated attacker with network access via HTTP to compromise EAS, potentially leading to unauthorized access to all EAS data. CVSSv3.1 base score is 8.6 (...
CVE-2021-2349
Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...
CVE-2021-2349
Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...
SUSE: Security Advisory (SUSE-SU-2018:2349-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2005-2349
creationtimestamp| type| source ---|---|--- 2019-10-28 17:26:43+00:00| seen| https://t.me/cibsecurity/7703 2024-01-29 10:11:50+00:00| seen| https://t.me/ctinow/175137...
CVE-2005-2349
Zoo 2.10 has Directory traversal...
CVE-2005-2349
CVE-2005-2349 affects Zoo 2.10 via a directory traversal vulnerability. The documents explicitly state the issue but do not provide root cause, affected components beyond Zoo 2.10, impact details, exploit status, or remediation.
mahjonginn.com Cross Site Scripting vulnerability
Security Researcher Hchabik Helped patch 2349 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting mahjonginn.com website and its users. Following coordinated...
CVE-2018-2349
CVE-2018-2349 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2017-2349
The CVE-2017-2349 entry describes a remote command injection in Juniper Junos OS SRX series IDP feature. Affected releases include Junos OS 12.1X44 (before 12.1X44-D60), 12.1X46 (before 12.1X46-D50), 12.1X47 (before 12.1X47-D30, D35), 12.3X48 (before 12.3X48-D20, D30), and 15.1X49 (before 15.1X49...
shaadi.com XSS vulnerability
Vulnerable URL: https://www.shaadi.com/shaadi-info/matrimonial-success-stories/wedding/id/14212?st=y%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.08.2017 Vulnerability type:|...
CVE-2016-2349
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...
CVE-2016-2349
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...
CVE-2015-2349
The CVE-2015-2349 entry describes a cross-site scripting (XSS) vulnerability in SuperWebMailer’s defaultnewsletter.php affecting version 5.60.0.01190 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the HTMLForm parameter, enabling script execution in a...