91 matches found
MINI-2589-36PF-GWMM
Bulletin has no description...
CVE-2026-2589
creationtimestamp| type| source ---|---|--- 2026-03-06 02:43:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgec4zrymh2k...
SonicWALL NSA 2400 Improper Neutralization of Input During Web Page Generation (CVE-2014-2589)
Cross-site scripting XSS vulnerability in the Dashboard Backend service stats/dashboard.jsp in SonicWall Network Security Appliance NSA 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter. This plugin only works with Tenable.ot. Please visit...
Linux Distros Unpatched Vulnerability : CVE-2020-2589
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.28 and prior and 8.0.17 and prior...
CVE-2023-2589
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. An attacker can clone a repository from a public project, from a disallowed IP, even after the...
CVE-2025-2589
creationtimestamp| type| source ---|---|--- 2025-03-21 13:19:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8333 2025-03-21 15:58:42+00:00| seen| https://t.me/cvedetector/20813 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...
CVE-2025-2589
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument usercookie leads to improper authorization. The exploit has been disclosed to the...
CVE-2025-2589 code-projects Human Resource Management System Account.go Index improper authorization
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument usercookie leads to improper authorization. The exploit has been disclosed to the...
CVE-2025-2589 code-projects Human Resource Management System Account.go Index improper authorization
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument usercookie leads to improper authorization. The exploit has been disclosed to the...
CVE-2025-2589
CVE-2025-2589 affects the Code-Projects Human Resource Management System (HMS) 1.0.1. The vulnerability resides in the Index function of the file handler\Account.go , where manipulation of the argument user_cookie leads to improper authorization. Multiple sources in connected documents confirm th...
Linux Distros Unpatched Vulnerability : CVE-2022-2589
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3. CVE-2022-2589 Note that Nessus relies on the presence of the package a...
CVE-2023-2589
creationtimestamp| type| source ---|---|--- 2025-01-07 16:38:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/457...
SUSE: Security Advisory (SUSE-SU-2024:2589-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-2589
creationtimestamp| type| source ---|---|--- 2024-03-18 15:26:27+00:00| seen| https://t.me/ctinow/210638...
CVE-2024-2589 SQL injection vulnerability in AMSS++
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetailschoolperson.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in th...
CVE-2023-2589
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. An attacker can clone a repository from a public project, from a disallowed IP, even after the...
CVE-2023-2589
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. An attacker can clone a repository from a public project, from a disallowed IP, even after the...
CVE-2023-2589
CVE-2023-2589 affects GitLab EE across multiple lines: all versions from 12.0 up to, but not including, 15.10.8; all versions from 15.11 up to, but not including, 15.11.7; and all versions from 16.0 up to, but not including, 16.0.2. The issue allows an attacker to clone a repository from a public...
CVE-2023-2589
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. An attacker can clone a repository from a public project, from a disallowed IP, even after the...
CVE-2023-2589
Removed by vendor...