100 matches found
SUSE CVE-2011-2490
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes...
CVE-2022-2490
creationtimestamp| type| source ---|---|--- 2022-07-20 16:20:04+00:00| seen| https://t.me/cibsecurity/46644...
CVE-2022-2490 SourceCodester Simple E-Learning System search.php sql injection
A vulnerability classified as critical has been found in SourceCodester Simple E-Learning System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument classCode with the input 1'||SELECT 0x74666264 WHERE 5610=5610 AND SELECT 7504 FROMSELECT...
CVE-2022-2490 SourceCodester Simple E-Learning System search.php sql injection
A vulnerability classified as critical has been found in SourceCodester Simple E-Learning System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument classCode with the input 1'||SELECT 0x74666264 WHERE 5610=5610 AND SELECT 7504 FROMSELECT...
CVE-2022-2490
CVE-2022-2490 affects SourceCodester Simple E-Learning System 1.0. The vulnerability is a SQL injection in an unknown function of the file search.php , triggered by manipulating the parameter classCode (example payload includes 1'||(SELECT 0x74666264 …)). Exploitation is possible remotely, and pu...
Mageia: Security Advisory (MGASA-2014-0292)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2490
Summary: CVE-2020-2490 is a remote command-injection vulnerability in QNAP QTS prior to 4.4.3.1421 (build 20200907). Affected product/version: QNAP Systems QTS, versions before 4.4.3.1421 on build 20200907. Impact (as stated): If exploited, allows remote attackers to execute arbitrary commands wi...
CVE-2010-2490
creationtimestamp| type| source ---|---|--- 2019-10-31 19:33:44+00:00| seen| https://t.me/cibsecurity/7813 2024-02-01 09:07:00+00:00| seen| https://t.me/ctinow/177402...
CVE-2010-2490
Mumble: murmur-server has DoS due to malformed client query...
CVE-2010-2490
Mumble: murmur-server has DoS due to malformed client query...
CVE-2010-2490
CVE-2010-2490 applies to Mumble: murm ur-server and causes DoS from a malformed client query. The OSV entry notes a fix in the openSUSE Tumbleweed package mumble-1.2.17-1.2 (GA media), indicating that the vulnerability has been addressed in that release. Other connected sources reiterate the DoS ...
CVE-2019-2490
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Panel Processor. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2019-2490
The CVE-2019-2490 entry affects Oracle’s PeopleSoft Enterprise PeopleTools, Panel Processor subcomponent, in versions 8.55, 8.56 and 8.57. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though exploitation requires user interaction. The impact is unauthor...
CVE-2019-2490
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Panel Processor. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2017-2490
creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41804...
CVE-2017-2490
CVE-2017-2490 is a kernel vulnerability in macOS/iOS/watchOS/tvOS involving the FSEVENTS device. Connected data identifies a double-free race in fsevents locking: two threads may read the same devices_not_to_watch pointer at the (a) point and free it at (d) without proper protection, creating a u...
CVE-2016-2490
The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27533373...
CVE-2016-2490
CVE-2016-2490 is an elevation-of-privilege flaw in the NVIDIA camera driver on Android for Nexus 9, allowing a crafted app to run with kernel context privileges. The Android June 2016 bulletin indicates patches were issued for Nexus devices; specific remediation for Nexus 9 is part of that update...
Oracle: Security Advisory (ELSA-2014-0889)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2014-0907)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...