63 matches found
CVE-2022-2578 SourceCodester Garage Management System createUser.php access control
A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /phpaction/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit...
VulnCheck KEV: CVE-2013-2578
cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...
Oracle WebCenter Sites Multiple Vulnerabilities (April 2019 CPU)
Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI version 12.2.1.3.0 is vulnerable to multiple vulnerabilities. - A vulnerability exists that could allow a remote attacker with network access over HTTP to to compromise Orable WebCenter Sites. This could result...
Oracle Solaris Critical Patch Update : jan2020_SRU11_4_16_4_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network...
CVE-2020-2578
CVE-2020-2578 affects Oracle Solaris (Kernel) 11. The connected documents confirm a vulnerability in the Solaris kernel with network access via SMB as the attack surface, leading to a partial denial of service. The CVSSv3 base score is 5.8 (Medium) with network access, low attack complexity, no p...
CVE-2019-2578
Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 (Advanced UI) is affected by CVE-2019-2578 due to broken access control. This could let an unauthenticated attacker with network access over HTTP gain unauthorized access to data across the WebCenter Sites instance. The CVSSv3 base score is 8.6 ...
CVE-2018-2578
CVE-2018-2578 affects Oracle Solaris (Kernel subcomponent) on Solaris 11.3. The vulnerability is local-privilege based, with exploits requiring user interaction and a logon to the Solaris host; successful exploitation can lead to takeover of Solaris and potentially impact other products. The issu...
Oracle Solaris Critical Patch Update : jan2018_SRU11_3_27_4_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged...
CVE-2016-2578
CVE-2016-2578 is rejected/not used per the description; it does not represent an active vulnerability entry.
Fedora Update for moodle FEDORA-2017-ae7a707032
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-2578
CVE-2017-2578 affects Moodle 3.x with a cross-site scripting (XSS) vulnerability on the assignment submission page. The available connected documents corroborate the XSS issue but do not provide concrete details on affected versions beyond the Moodle 3.x range, specific vulnerable components, roo...
TP-Link SC2020n Authenticated Telnet Injection
The TP-Link SC2020n Network Video Camera is vulnerable to OS Command Injection via the web interface. By firing up the telnet daemon, it is possible to gain root on the device. The vulnerability exists at /cgi-bin/admin/servetest, which is accessible with credentials. Module Options msf use...
Ubuntu: Security Advisory (USN-2578-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : LibreOffice vulnerabilities (USN-2578-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2578-1 advisory. Alexander Cherepanov discovered that LibreOffice incorrectly handled certain RTF files. If a user were tricked into opening a specially crafted RTF...
CVE-2015-2578
CVE-2015-2578 refers to an unspecified vulnerability in Oracle Sun Solaris 11.2, specifically in the Kernel IDMap subcomponent, that can be exploited remotely to affect availability (denial of service). Public details across sources confirm a network-exposed condition affecting Solaris 11.2 and d...
Oracle Solaris Critical Patch Update : apr2015_SRU11_2_8_5_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: ZFS File system. The supported version that is affected is 11.2. Easily exploitable vulnerability requiring logon to...
CVE-2014-2578
Cross-site scripting XSS vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-2578
Cross-site scripting XSS vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-2578
CVE-2014-2578 describes a cross-site scripting (XSS) vulnerability in Splunk Web prior to 5.0.8. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software is Splunk Web (Splunk) with versions before 5.0.8; the root cause is an input/output...