189 matches found
MINI-2384-758M-P59F
Bulletin has no description...
MiracleLinux 4 : kernel-2.6.32-279.14.1.el6 (AXSA:2012-1018:09)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-1018:09 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operatin...
EUVD-2026-2384
Due to a Cross-Site Request Forgery CSRF vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on...
EUVD-2020-2384
Malware in sbrugna...
EUVD-2025-2384
Malicious code in bioql PyPI...
CVE-2023-2384
A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=dmzsetup.htm of the component Web Management Interface. The manipulation of the argument dhcp.SecDnsIPByte2 leads to cros...
CVE-2022-2384
The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2025-2384
A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument...
CVE-2025-2384
A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument...
CVE-2025-2384 code-projects Real Estate Property Management System Parameter InsertCustomer.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument...
CVE-2025-2384 code-projects Real Estate Property Management System Parameter InsertCustomer.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument...
Linux Distros Unpatched Vulnerability : CVE-2012-2384
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the i915gemdoexecbuffer function in drivers/gpu/drm/i915/i915gemexecbuffer.c in the Direct Rendering Manager DRM subsystem in the Linux kern...
CVE-2024-2384
The WooCommerce POS plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.4.11. This is due to the plugin not properly verifying the authentication and authorization of the current user This makes it possible for authenticated attackers, with...
WordPress WooCommerce POS Plugin <= 1.4.11 is vulnerable to Sensitive Data Exposure
Software WooCommerce POS Type Plugin Vulnerable versions = 1.4.11 Fixed in 1.4.12 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2384 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3a9aafe43482 Credits Lucio Sá Required...
Amazon Linux 2 : vim (ALAS-2024-2384)
It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2384 advisory. Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the...
CVE-2023-2384
CVE-2023-2384 affects Netgear SRX5308 Web Management Interface, specifically the file scgi-bin/platform.cgi?page=dmz_setup.htm. The vulnerability arises from insufficient input validation on the dhcp.SecDnsIPByte2 parameter, enabling remote cross-site scripting. Multiple sources confirm versions ...
Debian: Security Advisory (DLA-439-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2384
creationtimestamp| type| source ---|---|--- 2022-08-15 14:37:49+00:00| seen| https://t.me/cibsecurity/48136...
CVE-2022-2384
The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-2384
The CVE concerns the WordPress plugin Digital Publications by Supsystic (pre-1.7.4). Affected component: plugin settings sanitization/escaping, enabling stored cross-site scripting when a high-privilege user (e.g., admin) can access the Settings UI. Root cause: lack of sanitization/escaping in pl...