112 matches found
MINI-2595-P2M6-V8WH
Bulletin has no description...
EUVD-2026-2595
EUVD-2026-2595...
CVE-2019-2595
Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access...
EUVD-2020-2595
Malware in sbrugna...
CVE-2025-2595
An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing...
CVE-2025-2595
creationtimestamp| type| source ---|---|--- 2025-04-23 08:05:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13016 2025-04-23 09:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnhuhjc5y32b 2025-04-23 12:42:55+00:00| seen|...
CVE-2025-2595 Forced Browsing Vulnerability in CODESYS Visualization
An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing...
Amazon Linux 2 : krb5 (ALAS-2024-2595)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2595 advisory. krb5: GSS message token handling CVE-2024-37370 In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens wi...
CVE-2024-2595
creationtimestamp| type| source ---|---|--- 2024-03-18 15:26:36+00:00| seen| https://t.me/ctinow/210644...
CVE-2024-2595 Cross-Site Scripting (XSS) in AMSS++
Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/modules/book/main/bookdetailkhetperson.php, in the 'bid' parameter. This vulnerability could allow a remote attacker to send a...
CVE-2024-2595 Cross-Site Scripting (XSS) in AMSS++
Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/modules/book/main/bookdetailkhetperson.php, in the 'bid' parameter. This vulnerability could allow a remote attacker to send a...
Huawei EulerOS: Security Advisory for perl-HTTP-Tiny (EulerOS-SA-2023-2595)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-2595
creationtimestamp| type| source ---|---|--- 2023-05-09 16:38:51+00:00| seen| https://t.me/cibsecurity/63610...
CVE-2023-2595
CVE-2023-2595 affects SourceCodester Billing Management System 1.0; vulnerable component: ajax_service.php (POST Parameter Handler). Manipulation of the drop_services parameter enables SQL injection. Attack can be launched remotely; exploit has been disclosed. Documents do not specify a fixed ver...
CVE-2022-2595
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2595 Improper Authorization in kromitgmbh/titra
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2595
CVE-2022-2595 concerns the GitHub repository kromitgmbh/titra, affected in versions prior to 0.79.1. The root cause is improper authorization in the Add Extension functionality, which can allow a low-privilege/unauthenticated user to upload a malicious extension and trigger remote code execution....
openSUSE: Security Advisory for mozilla-nss (SUSE-SU-2022:2595-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Rocky Linux 8 : 389-ds:1.4 (RLSA-2021:2595)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2595 advisory. - When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...
CentOS 8 : 389-ds:1.4 (CESA-2021:2595)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2595 advisory. - 389-ds-base: syncrepl NULL pointer dereference in synccreatestatecontrol CVE-2021-3514 Note that Nessus has not tested for this issue but has instead relied...