CVE-2022-2364

CVE-2022-2364 affects SourceCodester Simple Parking Management System 1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /ci_spms/admin/category path, triggered by manipulating the vehicle_type argument with a payload such as “>”. It is described as exploitable remotely and the...

CVE-2019-2364

CVE-2019-2364 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2019-2364

...

CVE-2021-2364

The CVE-2021-2364 issue affects the Oracle E-Business Suite iSupplier Portal (Accounts component). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable by a low-privileged, unauthenticated attacker over HTTP with network access, potentially leading to unauthori...

RHEL 8 : libwebp (RHSA-2021:2364)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2364 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...

SUSE: Security Advisory (SUSE-SU-2019:2364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-2364

The CVE-2018-2364 entry affects SAP CRM WebClient UI versions 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01 and S4FND 1.02. The root cause is insufficient validation/encoding of hidden fields, leading to Cross-Site Scripting (XSS). The connected documents confirm the existence of the vulnerability but...

Apple WebKit Frame::setDocument UXSS

Apple WebKit: UXSS via Frame::setDocument 1. CVE-2017-2364 void Frame::setDocumentRefPtr&& newDocument ASSERT!newDocument || newDocument-frame == this; if mdoc && mdoc-pageCacheState != Document::InPageCache mdoc-prepareForDestruction; mdoc = newDocument.copyRef; ... The function...

CVE-2017-2364

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41799...

Fedora Update for webkitgtk4 FEDORA-2017-b1abcbe695

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for webkitgtk4 FEDORA-2017-0beb752b6e

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-2364

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...

CVE-2017-2364

CVE-2017-2364 affects WebKit components in iOS (before 10.2.1) and Safari (before 10.0.3), allowing a crafted website to bypass Same Origin Policy and potentially exfiltrate sensitive data. The issue is tied to WebKit in Apple products and has been publicly acknowledged with patches in iOS 10.2.1...

CVE-2017-2364

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...

CVE-2016-2364

The CVE-2016-2364 issue affects Fonality’s HUDweb plugin for Google Chrome (versions 12.6–14.1i) where the plugin uses a single hardcoded private key across different customer installations, enabling remote attackers to defeat cryptographic protections by exploiting knowledge of that key from ano...

Fonality contains a hard-coded password and embedded SSL private key

Overview Fonality previously trixbox Pro version 12.6 and later uses a hard-coded password, and the accompanying HUDweb plugin embeds a private SSL key. Description CWE-259: Use of Hard-coded Password - CVE-2016-2362According to the reporter, FTP is used to sync phone configurations for users, by...

openSUSE: Security Advisory for bind (openSUSE-SU-2015:2364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2008-0967)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-0885)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...