CVE-2024-2391

creationtimestamp| type| source ---|---|--- 2024-03-12 12:26:30+00:00| seen| https://t.me/ctinow/205600 2024-03-12 12:32:29+00:00| seen| https://t.me/ctinow/205613...

CVE-2024-2391 EVE-NG Lab cross site scripting

A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the component Lab Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may ...

CVE-2024-2391

Summary: CVE-2024-2391 affects EVE-NG 5.0.1-13, specifically the Lab Handler component, where improper protection of the web page structure enables cross-site scripting. The issue can be exploited remotely, and public exploits/mentions exist (VDB-256442). Root cause: manipulation of an unknown La...

CVE-2023-2391

creationtimestamp| type| source ---|---|--- 2023-04-29 00:27:54+00:00| seen| https://t.me/cibsecurity/63111...

CVE-2023-2391 Netgear SRX5308 Web Management Interface cross site scripting

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ntp.server2 leads to cross site...

CVE-2023-2391

The Netgear SRX5308 Web Management Interface is affected by a cross-site scripting (XSS) vulnerability in the ntp.server2 parameter, exploitable via scgi-bin/platform.cgi?page=time_zone.htm. Affected firmware: up to 4.3.5-3. The issue arises from insufficient input validation, allowing remote att...

CVE-2022-2391

creationtimestamp| type| source ---|---|--- 2022-08-08 18:24:05+00:00| seen| https://t.me/cibsecurity/47748...

CVE-2022-2391 Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting

The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as low as Contributor to inject JavaScript into the description...

CVE-2022-2391

CVE-2022-2391 affects the Inspiro PRO WordPress plugin. The issue stems from inadequate sanitization of the portfolio slider description, enabling stored cross-site scripting where users with privileges as low as Contributor can inject JavaScript. Affected: Inspiro PRO WordPress plugin versions e...

02-sms-async (=1.0.0), 10tcl (=0.0.1) +8851 more potentially affected by CVE-2019-2391 via bson (>=0.0.4 <=1.1.1)

bson NPM version =0.0.4, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.1.4, =0.0.1, =0.1.0, =1.0.0 and more Source cves: CVE-2019-2391 Source advisory: OSV:GHSA-4JWP-VFVF-657P...

CVE-2021-2391

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Scheduler. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2021-2391

CVE-2021-2391 applies to Oracle BI Publisher (Fusion Middleware Scheduler). Affected products/versions include Oracle BI Publisher 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows a low-privilege, unauthenticated or lightly authenticated attacker with network access via ...

Important: Red Hat Security Advisory: postgresql:9.6 security update

An update for the postgresql:9.6 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

RHEL 8 : postgresql:9.6 (RHSA-2021:2391)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2391 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

SUSE: Security Advisory (SUSE-SU-2016:1445-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2628-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2589-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2391-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2781-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 3.9.1 security update

An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...