137 matches found
RHEL 5 : pidgin (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pidgin: Out-of-bounds write in purplemarkupunescapeentity triggered by invalid XML CVE-2017-2640 - A deni...
CVE-2024-2370
creationtimestamp| type| source ---|---|--- 2024-03-11 14:26:39+00:00| seen| https://t.me/ctinow/204721 2024-03-11 14:26:40+00:00| seen| https://t.me/ctinow/204722...
CVE-2024-2370
Rejected reason: DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2018-5341. Reason: This CVE Record is a duplicate of CVE-2018-5341. Notes: All CVE users should reference CVE-2018-5341 instead of this record...
CVE-2024-2370
CVE-2024-2370 is a duplicate of CVE-2018-5341 affecting Zoho ManageEngine Desktop Central. The connected records describe a missing server-side file type/extension check in Desktop Central 10.0.124/10.0.184, and note the 2018-5341 advisory as the authoritative entry. No explicit exploit details o...
Amazon Linux 2 : mailman (ALAS-2023-2370)
The version of mailman installed on the remote host is prior to 2.1.15-30. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2370 advisory. In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for...
Huawei EulerOS: Security Advisory for sysstat (EulerOS-SA-2023-2370)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 9 : unbound (ELSA-2023-2370)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2370 advisory. 1.16.2-3 - Fix NRDelegation attack leading to uncontrolled resource consumption CVE-2022-3204 Tenable has extracted the preceding description block directly fro...
CVE-2023-2370
creationtimestamp| type| source ---|---|--- 2023-04-28 18:27:29+00:00| seen| https://t.me/cibsecurity/63064...
CVE-2023-2370
CVE-2023-2370 affects SourceCodester Online DJ Management System 1.0, where the GET Parameter Handler in admin/events/manage_event.php is vulnerable due to improper handling of the id parameter, enabling SQL injection. The vulnerability allows remote exploitation and has been publicly disclosed. ...
K9110: Apache Tomcat information disclosure vulnerability - CVE-2008-2370
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...
Ubuntu: Security Advisory (USN-162-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2370
The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS code for the settings, allowing any authenticated users, such as subscriber to retrieve them...
CVE-2022-2370
CVE-2022-2370 affects the YaySMTP WordPress plugin prior to 2.2.1. The root cause is a missing capability check before rendering Mailer Credentials in JavaScript on the settings page, allowing any authenticated user (e.g., subscriber) to view them. Documented impact is exposure of SMTP credential...
openSUSE: Security Advisory for xorg-x11-server (SUSE-SU-2022:2370-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GHSA-JF7G-5Q92-4HP2 Apache ODE Path Traversal vulnerability
The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. This issue was...
Slackware: Security Advisory (SSA:2005-251-03)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Rocky Linux 8 : container-tools:3.0 (RLSA-2021:2370)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2370 advisory. - runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multipl...
Fedora: Security Advisory for community-mysql (FEDORA-2021-df40c41094)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...