95 matches found
CGA-2638-M5R6-7WWX
Bulletin has no description...
EUVD-2011-2036
Malware in sbrugna...
EUVD-2016-9415
Malware in sbrugna...
EUVD-2018-2638
Malware in sbrugna...
EUVD-2001-0590
Malware in sbrugna...
CVE-2022-2638
The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...
CVE-2019-2638
Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Consolidation Hierarchy Viewer. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows low privileged...
CVE-2012-2638
Cross-site scripting XSS vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2025-2638
A vulnerability, which was classified as problematic, was found in JIZHICMS up to 1.7.0. This affects an unknown part of the file /user/release.html of the component Article Handler. The manipulation of the argument ishot with the input 1 leads to improper authorization. It is possible to initiat...
CVE-2025-2638
creationtimestamp| type| source ---|---|--- 2025-03-23 05:36:53+00:00| seen| https://t.me/cvedetector/20888 2025-03-23 05:53:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkzkiekq6k26...
CVE-2025-2638 JIZHICMS Article release.html improper authorization
A vulnerability, which was classified as problematic, was found in JIZHICMS up to 1.7.0. This affects an unknown part of the file /user/release.html of the component Article Handler. The manipulation of the argument ishot with the input 1 leads to improper authorization. It is possible to initiat...
Amazon Linux 2 : thunderbird (ALAS-2024-2638)
The version of thunderbird installed on the remote host is prior to 115.15.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2638 advisory. An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion,...
CVE-2023-2638
Rockwell Automation’s FactoryTalk System Services is affected by CVE-2023-2638 due to improper authorization in the FTSSBackupRestore.exe component, which does not verify that backup configuration archives are password protected. This can allow a local, authenticated non-admin user to craft a mal...
CVE-2023-2638 Rockwell Automation FactoryTalk System Services Vulnerable to a Denial-of-Service Attack
Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected. Improper authorization in FTSSBackupRestore.exe may lead to the loading of malicious configuration archives. This vulnerability may allow a local, authenticated non-admin...
CVE-2023-2638 Rockwell Automation FactoryTalk System Services Vulnerable to a Denial-of-Service Attack
Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected. Improper authorization in FTSSBackupRestore.exe may lead to the loading of malicious configuration archives. This vulnerability may allow a local, authenticated non-admin...
SUSE CVE-2015-2638
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
CVE-2022-2638
creationtimestamp| type| source ---|---|--- 2022-08-29 22:34:22+00:00| seen| Telegram/qNDHtuygVvdHj90tBxHxEN4oTD8b9yHsP4ES-32NS1MVZow...
CVE-2022-2638
CVE-2022-2638 affects the WordPress Export All URLs plugin prior to version 4.4. The vulnerability arises from insufficient validation of the path of the CSV file to be removed, enabling high-privilege users to delete arbitrary files on the server. Public sources in the connected documents consis...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : mokutil (SUSE-SU-2022:2638-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2638-1 advisory. - Adds SBAT revocation support to mokutil. bsc1198458 New options added see manpage: - mokutil --sbat Lis...
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2638)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...