99 matches found
CVE-2023-2377
creationtimestamp| type| source ---|---|--- 2023-04-28 20:27:31+00:00| seen| https://t.me/cibsecurity/63080...
CVE-2023-2377
A vulnerability was detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The impacted element is an unknown function of the component Web Management Interface. The manipulation of the argument Name results in command injection. The attack can be launched remotely. The exploit is now public and...
CVE-2023-2377
The CVE-2023-2377 entry concerns Ubiquiti EdgeRouter X (up to 2.0.9-hotfix.6) with a vulnerability in the Web Management Interface. The issue is triggered by manipulation of the name argument, leading to remote command injection. The vulnerability affects the Web Management Interface component an...
CVE-2022-2377 Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog...
CVE-2022-2377 Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog...
CVE-2022-2377
The CVE concerns the Directorist WordPress plugin prior to version 7.3.0, which lacks authorization and CSRF checks in an AJAX action. This allows any authenticated user to send arbitrary emails on behalf of the blog, exposing a potential abuse vector for unintended messaging. The vulnerability i...
CVE-2021-2377
Oracle PeopleSoft Enterprise PeopleTools SQR vulnerability (CVE-2021-2377) affects PeopleSoft/PT PeopleTools versions 8.57–8.59. The root cause is a security weakness in the SQR component that allows a low-privilege, network-authenticated attacker (via HTTP) to read a subset of data. CVSS 3.1 bas...
CVE-2021-2377
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
Huawei EulerOS: Security Advisory for pidgin (EulerOS-SA-2019-2650)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for pidgin (EulerOS-SA-2019-2387)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Privilege Escalation
An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...
CVE-2018-2377
In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users...
CVE-2018-2377
The CVE-2018-2377 issue affects SAP HANA Extended Application Services 1.0. It allows unauthorized users to retrieve some general server statistics and status information, indicating a partial confidentiality impact. Root cause details are not explicitly provided beyond exposure of server metadat...
CVE-2018-2377
In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users...
Pidgin MXIT HTTP Content-Length Buffer Overflow Vulnerability(CVE-2016-2377)
DESCRIPTION A buffer vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could potentially result in an out of bounds write of one byte. A malicious server can send a negative content-length in response to a HTTP request triggering t...
CVE-2006-2377
CVE-2006-2377 is rejected/not used per the description.
CVE-2017-2377
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service memory corruption and application crash by leveraging a window-close action...
CVE-2017-2377
CVE-2017-2377 affects Apple WebKit Web Inspector in iOS 10.x and Safari 10.1. Root cause: memory corruption when closing a window during a debugger-pause state, leading to a potential denial of service. Public details indicate updates exist for Safari 10.1 and iOS 10.3 (patches released as part o...