73 matches found
CVE-2022-2352 Post SMTP < 2.1.7 - Admin+ Blind SSRF
The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to perform blind SSRF on multisite installations for example...
CVE-2021-2352 affecting package mysql for versions less than 8.0.28-1
CVE-2021-2352 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...
CVE-2019-2352
CVE-2019-2352 is rejected/not used; it does not represent an active vulnerability entry.
Fedora: Security Advisory for community-mysql (FEDORA-2021-df40c41094)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-2352 affecting package mysql 8.0.24-1
CVE-2021-2352 affecting package mysql 8.0.24-1. An upgraded version of the package is available that resolves this issue...
Oracle MySQL Server 8.0 <= 8.0.25 Security Update (cpujul2021) - Windows
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
CVE-2021-2352 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2352
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...
CVE-2021-2352
CVE-2021-2352 affects Oracle MySQL Server (component: Server: DDL). Affected versions: 8.0.25 and earlier. An attacker with network access via multiple protocols and high privileges can cause a hang or crash of the MySQL Server, resulting in a denial of service. Remediation: upgrade to a fixed re...
giveaways.n.nu Cross Site Scripting vulnerability
Security Researcher Hchabik Helped patch 2352 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting giveaways.n.nu website and its users. Following coordinated...
badrumsrenoveringarstockholm.net Cross Site Scripting vulnerability
Security Researcher Hchabik Helped patch 2352 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting badrumsrenoveringarstockholm.net website and its users...
CVE-2005-2352
creationtimestamp| type| source ---|---|--- 2019-11-01 23:33:27+00:00| seen| https://t.me/cibsecurity/7852 2024-02-01 15:16:40+00:00| seen| https://t.me/ctinow/177607...
CVE-2005-2352
I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...
CVE-2005-2352
The CVE-2005-2352 entry maps to gs-gpl prior to version 8.56, where a race condition affects temporary file handling. According to CNVD/CVE context, the vulnerability arises from competing conditions during concurrent access to shared resources when the software operates in a networked environmen...
rolleritools.ru Cross Site Scripting vulnerability
Security Researcher Hchabik Helped patch 2352 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting rolleritools.ru website and its users. Following coordinate...
CVE-2017-2352
CVE-2017-2352 affects Apple devices: iOS before 10.2.1 and watchOS before 3.1.3. The issue is tied to the Unlock with iPhone component, described as a logic flaw in state management that can bypass wrist‑presence protection and unlock an Apple Watch via unspecified vectors. The linked Apple advis...
CVE-2017-2352
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows attackers to bypass the wrist-presence protection mechanism and unlock a Watch device via unspecified vectors...
CVE-2016-2352
The CVE-2016-2352 entry concerns the Accellion File Transfer Appliance (FTA) prior to FTA_9_12_40. The vulnerability arises from the YUM_CLIENT restricted-user role, enabling remote authenticated users to execute arbitrary commands with elevated privileges. Public documentation across sources con...