SUSE SLED15 / SLES15 Security Update : logrotate (SUSE-SU-2022:2396-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2396-1 advisory. - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel...

CVE-2022-2396

creationtimestamp| type| source ---|---|--- 2022-07-14 16:27:29+00:00| seen| https://t.me/cibsecurity/46227...

CVE-2022-2396

A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0. Affected by this vulnerability is an unknown functionality of the file /vcs/claireblake. The manipulation of the argument Bio with the input "alertdocument.cookie leads to cross site scripting. The...

CVE-2022-2396

CVE-2022-2396 affects SourceCodester Simple e-Learning System 1.0. The vulnerability is an XSS in the /vcs/claire_blake endpoint, triggered by manipulating the Bio parameter with payload like >. Root cause is lack of input filtering on Bio, leading to client-side script execution. Attack can b...

CVE-2022-2396 SourceCodester Simple e-Learning System claire_blake cross site scripting

A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0. Affected by this vulnerability is an unknown functionality of the file /vcs/claireblake. The manipulation of the argument Bio with the input "alertdocument.cookie leads to cross site scripting. The...

CVE-2021-2396

CVE-2021-2396 is a documented vulnerability in Oracle BI Publisher (Oracle Fusion Middleware, E-Business Suite - XDO). Affected are versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. The issue allows a low-privileged attacker with network access over HTTP to compromise Oracle BI Publisher...

RHEL 7 : rh-postgresql13-postgresql (RHSA-2021:2396)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2396 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

SUSE: Security Advisory (SUSE-SU-2016:2396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle E-Business Multiple Vulnerabilities (Jan 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2019 Critical Patch Update advisory : - Oracle CRM Technical Foundation Messages component is...

CVE-2019-2396

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Messages. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2019-2396

CVE-2019-2396 affects Oracle E-Business Suite, specifically the Oracle CRM Technical Foundation Messages component. Affected versions include 12.1.3 and 12.2.x up to 12.2.8. The vulnerability is described as easily exploitable: an unauthenticated attacker with network access via HTTP can compromi...

CVE-2018-2396

CVE-2018-2396 affects SAP Internet Graphics Server (IGS) on versions 7.20, 7.20EXT, 7.45, 7.49, 7.53, via the IGS Interpreter service. The issue, under certain conditions, allows a malicious user to prevent legitimate users from accessing IGS (a denial-of-service impact as described). The provide...

CVE-2015-2396

...

CVE-2015-2396

CVE-2015-2396 is rejected/not used per the Initial Description.

CVE-2017-2396

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2396

CVE-2017-2396 affects Apple WebKit in iOS (pre-10.3), Safari (pre-10.1), and tvOS (pre-10.2). Remote code execution or memory corruption leading to application crash via a crafted web site is described; root cause is memory corruption in WebKit when handling web content. Remediation is available:...

Multiple Dell SonicWALL Products Multiple Remote Code Execution Vulnerabilities

The GMS ViewPoint GMSVP web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via vectors related to configuration input. CVE: CVE-2016-2396 Last updated: March 12, 2018, 5:29 p.m...

CVE-2016-2396

CVE-2016-2396 affects Dell SonicWALL GMS ViewPoint (GMSVP) web app used by Dell SonicWALL GMS/Analyzer/UMA EM5000 versions 7.2, 8.0, 8.1 prior to Hotfix 168056. Affected component is the GMSVP web interface where input in configuration fields is not safely sanitized, allowing a remote authenticat...

openSUSE Security Update : taglib (openSUSE-SU-2012:0615-1)

Specially crafted MP4 files could crash taglib %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-275. The text description of this plugin is C SUSE LLC...

CVE-2013-2396

The CVE-2013-2396 entry concerns Oracle E-Business Suite (Oracle Applications Manager) versions 12.0.6 and 12.1.3. The vulnerability affects the Oracle Applications Manager component via HTML OAM client vectors, described as an unspecified vulnerability that can affect integrity. The NVD metrics ...