103 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-2391
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data...
CVE-2023-2391
A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ntp.server2 leads to cross site...
CVE-2025-2391
CVE-2025-2391 affects code-projects Blood Bank Management System version 1.0, specifically the Admin Login Page vulnerability at /admin/admin_login.php. The flaw permits SQL injection through manipulated input, enabling remote exploitation. Multiple connected sources corroborate the critical seve...
Linux Distros Unpatched Vulnerability : CVE-2016-2391
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ohcibusstart function in the USB OHCI emulation support hw/usb/hcd-ohci.c in QEMU allows local guest OS administrators to cause a denial of service NULL...
CVE-2024-2391
creationtimestamp| type| source ---|---|--- 2024-03-12 12:26:30+00:00| seen| https://t.me/ctinow/205600 2024-03-12 12:32:29+00:00| seen| https://t.me/ctinow/205613...
CVE-2024-2391 EVE-NG Lab cross site scripting
A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the component Lab Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may ...
CVE-2024-2391
Summary: CVE-2024-2391 affects EVE-NG 5.0.1-13, specifically the Lab Handler component, where improper protection of the web page structure enables cross-site scripting. The issue can be exploited remotely, and public exploits/mentions exist (VDB-256442). Root cause: manipulation of an unknown La...
CVE-2023-2391
creationtimestamp| type| source ---|---|--- 2023-04-29 00:27:54+00:00| seen| https://t.me/cibsecurity/63111...
CVE-2023-2391 Netgear SRX5308 Web Management Interface cross site scripting
A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ntp.server2 leads to cross site...
CVE-2023-2391
The Netgear SRX5308 Web Management Interface is affected by a cross-site scripting (XSS) vulnerability in the ntp.server2 parameter, exploitable via scgi-bin/platform.cgi?page=time_zone.htm. Affected firmware: up to 4.3.5-3. The issue arises from insufficient input validation, allowing remote att...
CVE-2022-2391
creationtimestamp| type| source ---|---|--- 2022-08-08 18:24:05+00:00| seen| https://t.me/cibsecurity/47748...
CVE-2022-2391
CVE-2022-2391 affects the Inspiro PRO WordPress plugin. The issue stems from inadequate sanitization of the portfolio slider description, enabling stored cross-site scripting where users with privileges as low as Contributor can inject JavaScript. Affected: Inspiro PRO WordPress plugin versions e...
CVE-2022-2391 Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting
The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as low as Contributor to inject JavaScript into the description...
02-sms-async (1.0.0), 1405-authtokens (>=1.0.1, <=1.0.5) +5966 more potentially affected by CVE-2019-2391 via bson (>=1.0.1, <=1.1.1)
bson NPM version =1.0.1, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.1.4, =0.1.0, =0.1.0, =0.0.1, =0.1.3 and more Source cves: CVE-2019-2391 Source advisory: OSV:GHSA-4JWP-VFVF-657P...
CVE-2021-2391
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Scheduler. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2021-2391
CVE-2021-2391 applies to Oracle BI Publisher (Fusion Middleware Scheduler). Affected products/versions include Oracle BI Publisher 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows a low-privilege, unauthenticated or lightly authenticated attacker with network access via ...
Important: Red Hat Security Advisory: postgresql:9.6 security update
An update for the postgresql:9.6 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
RHEL 8 : postgresql:9.6 (RHSA-2021:2391)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2391 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...
SUSE: Security Advisory (SUSE-SU-2016:2628-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:1445-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...