CVE-2022-2434 String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization

The String Locator plugin for WordPress is vulnerable to deserialization of untrusted input via the 'string-locator-path' parameter in versions up to, and including 2.5.0. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they can trick a site...

CVE-2021-2434

CVE-2021-2434 affects Oracle E-Business Suite’s Oracle Web Applications Desktop Integrator (component: Application Service). Affected versions are 12.1.3 and 12.2.3–12.2.10. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise the Oracle W...

CVE-2021-2434

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Application Service. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

SUSE: Security Advisory (SUSE-SU-2014:0769-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PRODSECBUG-2434: SQL injection in 'Catalog Products List' widget leading to privilege escalation

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

Fedora 28 : community-mysql (2019-21b76d179e)

MySQL 5.7.25 Release notes : https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-25.html CVEs fixed : CVE-2019-2420 CVE-2019-2434 CVE-2019-2455 CVE-2019-2481 CVE-2019-2482 CVE-2019-2486 CVE-2019-2503 CVE-2019-2507 CVE-2019-2510 CVE-2019-2528 CVE-2019-2529 CVE-2019-2531 CVE-2019-2532...

CVE-2019-2434

CVE-2019-2434 affects the Oracle MySQL Server component (subcomponent: Server: Parser). Affected versions include 5.7.24 and earlier and 8.0.13 and earlier. It is exploitable over the network by a low-privileged attacker and can cause a hang or a crash (availability impact) in MySQL Server. The C...

CVE-2019-2434

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Parser. Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

Security Bulletin: Vulnerabilities in Rational Functional Tester versions 8.x due to security vulnerabilities in IBM JRE 7.0 Service Release 4 Fix Pack 1 or earlier, and non-IBM Java 7.0

Summary Multiple security vulnerabilities exist in the Java Runtime Environments JREs IBM JRE 7.0 Service Release 4 Fix Pack 1 or earlier, and non-IBM Java 7.0 or earlier, that can affect the security of Rational Functional Tester. Vulnerability Details | Subscribe to My Notifications to be...

CVE-2018-2434

CVE-2018-2434 describes a content-spoofing vulnerability in SAP UI components (UI_Infra 1.0, UI_700 2.0; SAP_UI 7.4/7.5/7.51/7.52) used with SAP NetWeaver 7.00. The issue allows rendering HTML pages containing arbitrary plain text content, potentially misleading end users, but does not allow embe...

CVE-2017-2434

CVE-2017-2434 is an Apple iOS HomeKit vulnerability affecting iOS versions before 10.3, tied to a state issue in handling Home Control on Control Center. The issue is described as allowing an unspecified impact and is addressed in iOS 10.3 with a remediation that includes improved validation of H...

CVE-2016-2434

CVE-2016-2434 affects NVIDIA Tegra kernel driver (NVHOST) on Android/Nexus 9. An attacker can write an arbitrary value to an arbitrary location, leading to privilege escalation in the kernel. The issue is tied to the NVIDIA video driver in Android before 2016-05-01. Impact is described as local p...

CVE-2015-2434

The CVE-2015-2434 entry concerns Microsoft XML Core Services 3.0 and 5.0 that support SSL 2.0, which the sources describe as enabling a network-based decryption attack (man-in-the-middle) and thus exposing cryptographic protections. The connected documents corroborate that this vulnerability stem...

Microsoft Windows XML Core Services Information Disclosure Vulnerability (3080129)

This host is missing an important security update according to Microsoft Bulletin MS15-084. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-084: Vulnerabilities in XML Core Services Could Allow Information Disclosure (3080129)

The remote Windows host contains a version of Microsoft XML Core Services MSXML that is affected by multiple information disclosure vulnerabilities : - An information disclosure vulnerability exists in XML Core Services MSXML due to the use of Secure Sockets Layer SSL 2.0. A man-in-the-middle...

Microsoft XML Core Services CVE-2015-2434 Man in the Middle Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. Attackers can exploit this issue to disclose potentially sensitive information through man-in-the-middle attacks. Technologies Affected Microsoft Office 2007 SP2 Microsoft Windows 7 for 32-bit Systems SP1...

openSUSE Security Update : acroread (openSUSE-SU-2011:1238-1)

acrobat reader was updated to version 9.4.6 to fix several security issues CVE-2011-1353, CVE-2011-2431, CVE-2011-2432, CVE-2011-2433, CVE-2011-2434, CVE-2011-2435, CVE-2011-2436, CVE-2011-2437, CVE-2011-2438, CVE-2011-2439, CVE-2011-2440, CVE-2011-2441, CVE-2011-2442 %NASLMINLEVEL 70300 C Tenabl...

CVE-2014-2434

Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to DML...

CVE-2014-2434

Technical details about CVE-2014-2434 (affected product, root cause, impact, and fixes) are not provided in the supplied connected documents; monitor for official advisories or vendor advisories for updates.

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...