60 matches found
[SECURITY] Fedora 43 Update: perl-URI-5.36-1.fc43
This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 and updated by RFC 2732...
[SECURITY] Fedora 44 Update: perl-URI-5.36-1.fc44
This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 and updated by RFC 2732...
MINI-J4GP-633R-2396
Bulletin has no description...
ECHO-2396-CDFF-436A
Bulletin has no description...
CVE-2026-2396
creationtimestamp| type| source ---|---|--- 2026-04-15 00:40:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjinvgwpcl2z...
CVE-2021-2396
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: E-Business Suite - XDO. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...
CVE-2022-2396
A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0. Affected by this vulnerability is an unknown functionality of the file /vcs/claireblake. The manipulation of the argument Bio with the input " leads to cross site scripting. The attack can be...
CVE-2002-2396
Buffer overflow in Advanced TFTP atftp 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option...
CVE-2025-2396
creationtimestamp| type| source ---|---|--- 2025-03-17 07:48:29+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114176669025636925 2025-03-17 08:00:53+00:00| seen| Telegram/q1CDtHQhektK3nhn8ZC9Wm2qKNcq5HBzhGFEOdcD8VflUo 2025-03-17 09:01:18+00:00| seen|...
CVE-2025-2396
The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2025-2396 e-Excellence U-Office Force - Arbitrary File Upload
The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2025-2396 e-Excellence U-Office Force - Arbitrary File Upload
The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2024-2396
creationtimestamp| type| source ---|---|--- 2025-02-11 02:18:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulsdjdga22...
EulerOS 2.0 SP9 : libldb (EulerOS-SA-2024-2396)
According to the versions of the libldb package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MaxQueryDuration not honoured in Samba AD DC LDAPCVE-2021-3670 Tenable has extracted the preceding description block directly from the EulerOS libl...
Oracle Linux 9 : squashfs-tools (ELSA-2024-2396)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-2396 advisory. - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix CVE-2021-40153 squashfs-tools: unvalidated filepaths allow...
Moderate: Red Hat Security Advisory: squashfs-tools security update
An update for squashfs-tools is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Advisory ROSA-SA-2024-2396
Software: sudo 1.8.29 OS: ROSA Virtualization 2.1 packageevrstring: sudo-1.8.29-8.rv3.1 CVE-ID: CVE-2023-22809 BDU-ID: 2023-00210 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the sudoedit function of the Sudo system administration program is related to errors in the handling of additional...
Amazon Linux 2 : ntp (ALAS-2024-2396)
The version of ntp installed on the remote host is prior to 4.2.8p15-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2396 advisory. 2024-02-15: CVE-2023-26555 was added to this advisory. mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds wri...
CVE-2023-2396
The CVE-2023-2396 case concerns Netgear SRX5308 web management interface cross-site scripting (XSS) via manipulation of the USERDBUsers.Password parameter. Affected product: Netgear SRX5308 (firmware up to 4.3.5-3). Root cause: improper handling of a password argument in the Web Management Interf...
CVE-2023-2396 Netgear SRX5308 Web Management Interface cross site scripting
A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument USERDBUsers.Password leads to cross site scripting. The attack can be initiated remotely. The...