99 matches found
CVE-2012-2350
creationtimestamp| type| source ---|---|--- 2024-02-26 08:41:40+00:00| seen| https://t.me/ctinow/193153...
Amazon Linux 2 : openssl (ALAS-2023-2350)
The version of openssl installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2350 advisory. Issue summary: Generating excessively long X9.42 DH keys or checkingexcessively long X9.42 DH keys or parameters may be very slow...
PT-2023-4213 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to a command injection vulnerability via the setWanCfg function. This vulnerability is associated with a lack of input data sanitization measures in the TOTOLINK...
CVE-2023-2350
creationtimestamp| type| source ---|---|--- 2023-04-27 20:26:39+00:00| seen| https://t.me/cibsecurity/62993...
CVE-2023-2350
A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched...
CVE-2023-2350 SourceCodester Service Provider Management System Users.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched...
CVE-2023-2350
CVE-2023-2350 affects SourceCodester Service Provider Management System 1.0, specifically the /classes/Users.php file. The vulnerability arises from manipulation of the id argument, enabling cross-site scripting (XSS). Exploitation is possible remotely, and the exploit has been publicly disclosed...
CVE-2022-2350
creationtimestamp| type| source ---|---|--- 2022-10-11 00:25:24+00:00| seen| https://t.me/cibsecurity/51081...
CVE-2022-2350
The CVE-2022-2350 entry concerns the WordPress plugin Disable User Login (versions up to 1.0.1). The root cause is missing authorization checks and CSRF protection when updating plugin settings, enabling unauthenticated attackers to block or unblock users. Public technical details describe the af...
Hardcoded credentials
The Emerson DeltaV Distributed Control System DCS controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350...
Emerson DeltaV Credentials Management Errors (CVE-2014-2350)
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program. This plugin only works with Tenable.ot. Please visit...
CVE-2019-2350
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2021-2350
creationtimestamp| type| source ---|---|--- 2021-07-21 18:45:17+00:00| seen| https://t.me/cibsecurity/26323...
CVE-2021-2350
Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...
CVE-2021-2350
Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...
CVE-2021-2350
CVE-2021-2350 affects Oracle Hyperion Essbase Administration Services (EAS Console). The vulnerability impacts Essbase 11.1.2.4 and 21.2, allowing an unauthenticated attacker with network access over HTTP to compromise EAS and gain unauthorized access to data or full EAS data. Documented base sco...
SUSE: Security Advisory (SUSE-SU-2017:2350-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:2350-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : flac (openSUSE-2020-2350)
This update for flac fixes the following issues : - CVE-2020-0487: Fixed a memory leak bsc1180112. - CVE-2020-0499: Fixed an out-of-bounds access bsc1180099. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package chec...