105 matches found
MINI-H6W7-2392-VHVF
Bulletin has no description...
MINI-2392-HXF2-VGGJ
Bulletin has no description...
CVE-2021-2392
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
Linux Distros Unpatched Vulnerability : CVE-2019-2392
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negati...
Linux Distros Unpatched Vulnerability : CVE-2017-2392
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the WebKit component. It allows attackers to execute...
CVE-2022-2392
The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher...
CVE-2025-2392
creationtimestamp| type| source ---|---|--- 2025-03-17 20:47:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7858 2025-03-17 23:20:05+00:00| seen| https://t.me/cvedetector/20526 2025-03-18 00:01:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkmegyvkp...
CVE-2025-2392
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2025-2392
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2025-2392 code-projects Online Class and Exam Scheduling System activate.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2025-2392
The CVE-2025-2392 entry concerns code-projects Online Class and Exam Scheduling System 1.0. Affected component: the activate.php handling of the id parameter. Root cause: lack of validation/sanitization enabling SQL injection. Impact: remote attacker could manipulate the id to execute SQL command...
Linux Distros Unpatched Vulnerability : CVE-2016-2392
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The isrndis function in the USB Net device emulator hw/usb/dev-network.c in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects,...
CVE-2024-20154
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Pat...
EulerOS 2.0 SP9 : gtk2 (EulerOS-SA-2024-2392)
According to the versions of the gtk2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current...
SAP Internet Graphics Server (IGS) XMLCHART XXE
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Internet Graphics Server IGS XMLCHART XXE', 'Description' = %q This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities...
Advisory ROSA-SA-2024-2392
Software: python-pillow 2.0.0-25 OS: rosa-server79 packageevrstring: python-pillow-2.0.0.0-25.gitd1c6db8.res7 CVE-ID: CVE-2023-44271 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A problem has been detected in Pillow. It is a denial of service that uncontrollably allocates memory to process a given task...
CVE-2024-2392
CVE-2024-2392 affects Blocksy Companion for WordPress; versions up to and including 2.0.31 are vulnerable to Stored XSS via the Newsletter widget due to insufficient input sanitization/escaping. Exploitation requires Contributor+ authenticated access; impact is arbitrary script injection in pages...
WordPress Blocksy Companion Plugin <= 2.0.31 is vulnerable to Cross Site Scripting (XSS)
Software Blocksy Companion Type Plugin Vulnerable versions = 2.0.31 Fixed in 2.0.32 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2392 Patch priority Low CVSS severity Low 6.5 Developer Creative Themes PSID bbd31df0e8be Credits Ngô Thiên An ancorn...