CVE-2023-2594

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2023-2594

CVE-2023-2594 affects SourceCodester Food Ordering Management System v1.0, specifically the Registration component. The vulnerability arises from manipulation of the username parameter, leading to SQL injection. It is described as remote-exploit capable with a CRITICAL/ HIGH impact profile (C, I,...

CVE-2023-2594 SourceCodester Food Ordering Management System Registration sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

Debian: Security Advisory (DLA-313-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Advanced Custom Fields Plugin 5.x < 5.12.3 File Upload Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:advancedcustomfields:advancedcustomfields"; ifdescription...

CVE-2022-2594

The CVE-2022-2594 entry concerns the WordPress plugins Advanced Custom Fields (ACF) and Advanced Custom Fields Pro (ACF Pro) prior to version 5.12.3. Affects ACF and ACF Pro when a frontend form is available, allowing unauthenticated users to upload files permitted by default WordPress configurat...

SUSE: Security Advisory (SUSE-SU-2018:2594-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 / 8 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2594 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

CVE-2020-2594

CVE-2020-2594 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM), specifically the “Project Manager” component. Affected versions span 16.2.0.0–16.2.19.3, 17.12.0.0–17.12.17.0, 18.8.0.0–18.8.18.0, 19.12.1.0–19.12.3.0, and 20.1.0.0–20.2.0.0. The vulnerability enables an ...

CVE-2019-2594

CVE-2019-2594 affects Oracle PeopleSoft Enterprise PT PeopleTools (subcomponent: Application Server). Affected versions are 8.55, 8.56 and 8.57. The vulnerability is exploitable by a low-privilege user with network access via HTTP and can lead to unauthorized creation, deletion or modification of...

CVE-2017-2594

CVE-2017-2594 is a path-traversal vulnerability in hawtio prior to versions 2.0-beta-1, 2.0-beta-2, 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 that can lead to a NullPointerException with a full stacktrace. The flaw allows an attacker to access sensitive information from hawtio’s root by exploiting improper...

Oracle iPlanet Web Server 7.0.x < 7.0.27 NSS Unspecified Vulnerability (January 2018 CPU)

According to its self-reported version, the Oracle iPlanet Web Server formerly known as Sun Java System Web Server running on the remote host is 7.0.x prior to 7.0.27 Patch 26834070. It is, therefore, affected by an unspecified vulnerability in the Network Security Services NSS library with unkno...

CVE-2018-2594

The CVE-2018-2594 entry concerns Oracle Hyperion BI+ (Foundation UI & Servlets) affected in version 11.1.2.4. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise Hyperion BI+, with exploitation requiring user interaction. Impact includes unauthorized upd...

CVE-2016-2594

...

CVE-2016-2594

CVE-2016-2594 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-2594

It was found that a path traversal vulnerability in hawtio leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root...

Oracle Linux 7 : 389-ds-base (ELSA-2016-2594)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2594 advisory. - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack - Resolves: bug 1350799 - CVE-2016-499...

RHEL 6 : libpng (RHSA-2015:2594)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2594 advisory. The libpng packages contain a library of functions for creating and manipulating PNG Portable Network Graphics image format files. It was...

CentOS Update for libpng CESA-2015:2594 centos6

Check the version of libpng SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882335";...

Oracle: Security Advisory (ELSA-2015-2594)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...