91 matches found
CVE-2021-2393
creationtimestamp| type| source ---|---|--- 2021-07-21 18:45:22+00:00| seen| https://t.me/cibsecurity/26327...
CVE-2021-2393
The CVE-2021-2393 issue affects Oracle E-Business Suite, specifically the Oracle E-Records component (E-signatures). Affected versions are 12.1.1ā12.1.3 and 12.2.3ā12.2.10. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise Oracle E-Records, potentially...
RHEL 8 : postgresql:9.6 (RHSA-2021:2393)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2393 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...
SUSE: Security Advisory (SUSE-SU-2012:0792-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MongoDB 3.6 < 3.6.15, 4.0 < 4.0.13, 4.2 < 4.2.1 DoS Vulnerability - Windows
MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...
CVE-2019-2393
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior t...
CVE-2019-2393
creationtimestamp| type| source ---|---|--- 2020-11-23 18:45:53+00:00| seen| https://t.me/cibsecurity/16701...
CVE-2019-2393
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior t...
CVE-2019-2393
Removed by vendor...
CVE-2019-2393 Crash while joining collections with $lookup
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior t...
CVE-2019-2393
CVE-2019-2393 affects MongoDB Server: v4.2 < 4.2.1, v4.0 < 4.0.13, and v3.6
Metasploit Wrap-Up
SAP Internet Graphics Server IGS This week includes a new module targeting the SAP Internet Graphics Server application, contributed by community member Vladimir Ivanov. This particular module covers two CVEs that are both XML External Entity XXE bugs that are remotely exploitable. The module com...
CVE-2018-2393
creationtimestamp| type| source ---|---|--- 2020-10-07 16:19:55+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/sap/sapigsxmlchartxxe.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:07+00:00| seen|...
CVE-2012-5363
The IPv6 implementation in FreeBSD and NetBSD unknown versions, year 2012 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than CVE-2011-2393...
SAP Internet Graphics Server (IGS) XMLCHART XXE
This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities within the XMLCHART page of SAP Internet Graphics Servers IGS running versions 7.20, 7.20EXT, 7.45, 7.49, or 7.53. These vulnerabilities occur due to a lack of appropriate validation on the Extension HTML tag when...
CVE-2018-2393
Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable...
CVE-2018-2393
SAP Internet Graphics Server (IGS) vulnerabilities CVE-2018-2393 affect IGS versions 7.20, 7.20EXT, 7.45, 7.49, and 7.53, specifically in the XMLCHART page. The issue arises from insufficient validation of the Extension HTML tag during a POST to generate a new chart, enabling XML External Entity ...
CVE-2015-2393
CVE-2015-2393 is rejected/not used as stated in the initial description.
CVE-2017-2393
CVE-2017-2393 affects iOS Safari Reader. The issue allows remote attackers to perform a Universal XSS (UXSS) via a crafted webpage, due to multiple validation issues in the Safari Reader component. Affected product: Apple iOS (pre-10.3) with Safari Reader enabled. Root cause: several input valida...