GitHub Repository Hestiacp Command Injection (CVE-2022-2550)

A command injection vulnerability exists in GitHub Repository Hestiacp. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2022-2550

creationtimestamp| type| source ---|---|--- 2022-07-27 18:49:56+00:00| seen| https://t.me/cibsecurity/47099...

CVE-2022-2550

CVE-2022-2550 : OS Command Injection in the GitHub repository hestiacp/hestiacp prior to 1.6.5. The Red Hat/NVD/CVE records, Huntr advisory, and PT-Security note describe an OS command injection vulnerability in the HestiaCP project, stemming from the DokuWiki installation flow (DokuWikiSetup.php...

openSUSE: Security Advisory for git (SUSE-SU-2022:2550-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2550-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2550-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : libexif (CESA-2020:2550)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2550 advisory. - libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS CVE-2020-13112 Note that Nessus has not tested for th...

RHEL 8 : libexif (RHSA-2020:2550)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2550 advisory. The libexif packages provide a library for extracting extra information from image files. Security Fixes: libexif: several buffer over-reads in EXIF...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1536)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2550

CVE-2020-2550 affects Oracle WebLogic Server (WLS Core Components) and is associated with versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability arises from insufficient access control in the WLS Core Components, enabling a locally authenticated attacker with logon to the i...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1492)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked...

CVE-2019-2550

CVE-2019-2550 affects Oracle FLEXCUBE Direct Banking (Logoff Page) version 12.0.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to affect Oracle FLEXCUBE Direct Banking, with exploitation requiring human interaction. Reported impact: unauthorized update/insert...

CVE-2014-2550

Cross-site request forgery CSRF vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disablecommentssettings page to wp-admin/options-general.php...

CVE-2014-2550

Cross-site request forgery CSRF vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disablecommentssettings page to wp-admin/options-general.php...

CVE-2014-2550

The CVE-2014-2550 entry concerns a CSRF vulnerability in the WordPress Disable Comments plugin prior to v1.0.4. The vulnerability allows remote attackers to hijack administrator authentication by issuing requests to the disable_comments_settings page (wp-admin/options-general.php) to enable comme...

CVE-2017-2550

CVE-2017-2550 affects Easy Joomla Backup v3.2.4 (Joomla plugin). The vulnerability arises when the plugin creates a copy of a backup file in the web root with a poorly secured, easily guessable filename, enabling an attacker to access the copied backup contents. This is described across multiple ...

CentOS Update for poppler CESA-2017:2550 centos6

Check the version of poppler SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882764";...

Oracle Linux 6 : poppler (ELSA-2017-2550)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2550 advisory. 0.12.4-12 - Resolves: rhbz1479815 CVE-2017-9776 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

RedHat Update for poppler RHSA-2017:2550-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-2550. Reason: This candidate is a duplicate of CVE-2016-2550. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2016-2550 instead of this candidate. All references and descriptions in this...