CVE-2020-2539

CVE-2020-2539 affects Oracle WebCenter Sites (Advanced UI) in Oracle Fusion Middleware, vulnerable in version 12.2.1.3.0. An unauthenticated attacker with network access via HTTP can compromise data, with successful attacks enabling unauthorized update/insert/delete and read access to WebCenter S...

CVE-2019-2539 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2019-2539

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Connection. Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

CVE-2019-2539

In the provided connected documents, CVE-2019-2539 is described as a vulnerability in the MySQL Server component (subcomponent: Server: Connection). Affected versions are 8.0.13 and prior. The flaw can be exploited by a highly privileged attacker with network access via multiple protocols to caus...

Oracle MySQL Server 8.0 <= 8.0.13 Security Update (cpujan2019) - Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Security update for webkit2gtk3 (important)

This update for webkit2gtk3 to version 2.18.0 fixes the following issues: These security issues were fixed: - CVE-2017-7039: An issue was fixed that allowed remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2017:2933-1)

This update for webkit2gtk3 to version 2.18.0 fixes the following issues: These security issues were fixed : - CVE-2017-7039: An issue was fixed that allowed remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted website...

Fedora 26 : webkitgtk4 (2017-9e83b902f9)

This update addresses the following vulnerabilities : - CVE-2017-2496, CVE-2017-2539, CVE-2017-2510 Additional fixes : - Fix URL shown in the title of beforeunload dialogs. - Focus first input field of HTTP authentication dialog. - Fix rendering glitches in HiDPI in long GitHub Gist pages when...

Fedora Update for webkitgtk4 FEDORA-2017-98bc28ae9e

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-2539

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2539

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2539

CVE-2017-2539 is tied to WebKit in Apple products (iOS before 10.3.2 and Safari before 10.1.1). The issue allows remote code execution or memory corruption leading to a denial of service via a crafted website. Connected advisories from OpenSUSE/SUSE note fixed WebKit-related CVEs in the webkit2gt...

CVE-2015-2539

...

CVE-2016-2539

Cross-site request forgery CSRF vulnerability in installmodules.php in ATutor before 2.2.2 allows remote attackers to hijack the authentication of users for requests that upload arbitrary files and execute arbitrary PHP code via vectors involving a crafted zip file...

CVE-2016-2539

ATutor

ATutor LMS - install_modules.php Cross-Site Request Forgery Remote Code Execution

ATutor LMS - installmodules.php Cross-Site Request Forgery Remote Code Execution / exp.js ATutor LMS " in it - You will need to set the Access-Control-Allow-Origin header to allow the target to pull zips - Use this with your favorite XSS attack - Student proof, aka bullet proof Timeline: 23/02/20...

CVE-2016-2539

creationtimestamp| type| source ---|---|--- 2016-03-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39524...

Ubuntu 14.04 LTS : Django vulnerabilities (USN-2539-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2539-1 advisory. Andrey Babak discovered that Django incorrectly handled striptags. A remote attacker could possibly use this issue to cause Django to enter an infinite...

VulnCheck KEV: CVE-2012-2539

Microsoft Word allows attackers to execute remote code or cause a denial-of-service DoS via crafted RTF data...

CVE-2012-2539

creationtimestamp| type| source ---|---|--- 2014-05-30 07:06:22+00:00| seen| MISP/53882d9c-46d8-4874-b5d6-9f55950d210b 2020-10-09 16:44:55+00:00| seen| MISP/50fd2b9c-ca64-448d-9bd4-3fe22e5cbdca 2020-10-09 16:57:40+00:00| seen| MISP/f658acf9-8570-49c6-b751-a1d29924d5fe 2023-06-14 21:10:03+00:00|...