K17159: PAM vulnerability CVE-2009-2410

Security Advisory Description The localhandlercallback function in server/responder/pam/pamLOCALdomain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in...

CVE-2022-2410

CVE-2022-2410 affects the WordPress mTouch Quiz plugin up to version 3.1.3. The issue is due to insufficient sanitization/escaping of certain settings, enabling Stored XSS when unfiltered_html is disallowed (e.g., multisite). Affected component: plugin settings handling; root cause: lack of input...

mysql:8.0 security, bug fix, and enhancement update

An update is available for mecab-ipadic, mecab, mysql. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user, multi-threaded SQL database server...

CVE-2021-2410

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Oracle MySQL Server 8.0 <= 8.0.25 Security Update (cpujul2021) - Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

CVE-2021-2410

CVE-2021-2410 : A vulnerability in Oracle MySQL Server (component: Server: Optimizer) affects MySQL 8.0.25 and earlier. An attacker with network access via multiple protocols and high privileges can exploit it to cause a hang or frequent crash (DoS). Public advisories parallel to this CVE indicat...

SUSE: Security Advisory (SUSE-SU-2018:2410-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2410

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: DGS RES Online, FMS Sender, FMS Receiver, OHC WPF Security. The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows...

CVE-2019-2410

The CVE-2019-2410 issue affects Oracle Hospitality Applications’ Cruise Shipboard Property Management System (component: DGS RES Online, FMS Sender, FMS Receiver, OHC WPF Security) version 8.0.8. The vulnerability allows an unauthenticated, locally logged-on attacker to compromise the system, ena...

CVE-2018-2410

SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting XSS vulnerability...

CVE-2018-2410

CVE-2018-2410 affects SAP Business One (versions 9.2 and 9.3) where the browser interface does not sufficiently encode user-supplied input, enabling a Cross-Site Scripting (XSS) vulnerability. The issue is rooted in input handling in the web-facing component and can lead to arbitrary script execu...

CVE-2017-2410

CVE-2017-2410 affects macOS Sierra 10.12.x kernels (Kernel) with an integer overflow vulnerability that allowed arbitrary code execution in kernel context via a crafted app. The issue is fixed by Apple in macOS 10.12.4 (Security Update 2017-001 for El Capitan/Yosemite as applicable). Affected pro...

CVE-2016-2410

A Qualcomm video kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages control over a service that can call this driver, aka internal bug 26291677...

CVE-2016-2410

CVE-2016-2410 is a local privilege-escalation vulnerability in the Qualcomm video kernel driver used by Android 6.x. The issue allows a crafted app that gains control over a service capable of invoking the driver to elevate privileges due to an internal bug (26291677). The Android security bullet...

laredoute.fr XSS vulnerability

Vulnerable URL: http://www.laredoute.fr/psrch/nrslt.aspx?kwrd=3453";alert/XSSPOSED///=100 Details: Description| Value ---|--- Patched:| Yes, at 29.09.2015 Latest check for patch:| 29.09.2015 12:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2410 Google...

SOL17159 - PAM vulnerability CVE-2009-2410

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (3076321)

This host is missing a critical security update according to Microsoft Bulletin MS15-065. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-2410

Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted stylesheet, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2015-2410

CVE-2015-2410 corresponds to multiple Internet Explorer versions (IE 6–11) information-disclosure vulnerabilities. The core issue is that a crafted stylesheet can cause IE to reveal the existence of local files, enabling an attacker to infer local-file presence. The CVE entry notes an information...

KLA10634 Multiple vulnerabilities in Microsoft Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to read local files, cause denial of service, bypass security restrictions, execute arbitrary code, gain privileges or obtain sensitive information. Below is a comple...