83 matches found
CVE-2022-2645
creationtimestamp| type| source ---|---|--- 2022-08-04 12:19:33+00:00| seen| https://t.me/cibsecurity/47541...
CVE-2022-2645 SourceCodester Garage Management System edituser.php cross site scripting
A vulnerability has been found in SourceCodester Garage Management System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edituser.php. The manipulation of the argument id with the input 1"alert1 leads to cross site scripting. The attack can b...
CVE-2022-2645
CVE-2022-2645 affects SourceCodester Garage Management System, specifically the edituser.php component. The vulnerability arises from improper handling of the id parameter, where input like 1"> triggers a cross-site scripting flaw. Exploitation can be performed remotely, and the vulnerability ...
CVE-2022-2645 SourceCodester Garage Management System edituser.php cross site scripting
A vulnerability has been found in SourceCodester Garage Management System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edituser.php. The manipulation of the argument id with the input 1"alert1 leads to cross site scripting. The attack can b...
Oracle Enterprise Manager Cloud Control (Jan 2020 CPU)
The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager, Supported versions that are...
CVE-2020-2645
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Connector Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2020-2645
CVE-2020-2645 affects Oracle Enterprise Manager Base Platform (Connector Framework). Affected versions: 12.1.0.5, 13.2.0.0, 13.3.0.0. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the Base Platform, potentially leading to unauthorized access to cri...
CVE-2020-2645
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Connector Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2019-2645
CVE-2019-2645 affects Oracle WebLogic Server (WLS Core Components). Affected versions are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. The underlying issue allows an unauthenticated attacker with network access via T3 to compromise WebLogic Server, potentially taking over the server. CVSS v3.0 base sco...
Oracle WebLogic Server Multiple Vulnerabilities (Apr 2019 CPU)
The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - An unspecified vulnerability in the Spring Framework allows a low privileged, remote attacker with network access via HTTP to compromise and takeover the Oracle Communications Unified...
RHEL 6 : kernel (RHSA-2018:2645)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2645 advisory. - kernel: TCP segments with random offsets allow a remote denial of service SegmentSmack CVE-2018-5390 Note that Nessus has not tested for this issue...
Moodle 3.x Multiple XSS Vulnerabilities (Mar 2017) - Linux
Moodle is prone to multiple XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...
Important: Red Hat Security Advisory: rh-mysql57-mysql security update
An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Fedora Update for community-mysql FEDORA-2018-394bf4fb5a
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for community-mysql FEDORA-2018-d553b29a30
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-2645
CVE-2018-2645 is present in the MySQL Server component (Server: Performance Schema). The connected MiracleLinux advisories AXSA:2018-2639/2638 note this CVE among patched issues for MiracleLinux 7 systems and reference affected packages such as rh-mysql56-mysql-5.6.39-1.el7.1 and rh-mysql57-mysql...
CVE-2018-2645
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Performance Schema. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
Oracle Mysql Security Updates (jan2018-3236628) 03 - Windows
Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescription...
MySQL 5.7.x < 5.7.21 Multiple Vulnerabilities (January 2018 CPU)
The version of MySQL running on the remote host is 5.7.x prior to 5.7.21. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...