65 matches found
CVE-2024-2649
A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /protocol/iscdevicestatus/deleteonlineuser.php. The manipulation of the argument messagecontent leads to sql...
CVE-2023-2649
creationtimestamp| type| source ---|---|--- 2023-05-11 12:15:15+00:00| seen| https://t.me/cibsecurity/63865...
CVE-2023-2649
A vulnerability was found in Tenda AC23 16.03.07.45cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the component Service Port 7329. The manipulation of the argument v2 leads to command injection. The attack can be initiated remotely. The explo...
CVE-2023-2649
CVE-2023-2649 affects Tenda AC23 with firmware 16.03.07.45_cn, where a flaw in the Service Port 7329 component (/bin/ate) allows manipulation of the v2 argument to trigger remote command injection. Exploitation can occur without user interaction and has been disclosed publicly. Impact is arbitrar...
openSUSE: Security Advisory for pcre2 (SUSE-SU-2022:2649-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Debian DLA-2649-1 : cgal security update
Four security issues have been discovered in cgal. A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL. CVE-2020-28601 An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex Faceof OOB read. An attacker can provide malicious input to trigge...
SUSE: Security Advisory (SUSE-SU-2017:2649-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-2649)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2649
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...
CVE-2020-2649
The CVE-2020-2649 entry concerns Oracle Retail Customer Management and Segmentation Foundation (Internal Operations) v16.0. The vulnerability is described as allowing a low-privilege attacker with logon to the hosting infrastructure to read a subset of data from the Foundation. Affected component...
CVE-2019-2649
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2649
CVE-2019-2649 affects Oracle WebLogic Server (WLS - Web Services) within Oracle Fusion Middleware. Affected versions are 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise WebLogic Server, potentially leading to...
Oracle WebLogic Server Multiple Vulnerabilities (Apr 2019 CPU)
The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - An unspecified vulnerability in the Spring Framework allows a low privileged, remote attacker with network access via HTTP to compromise and takeover the Oracle Communications Unified...
CVE-2017-2649
It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks...
CVE-2017-2649
The CVE-2017-2649 entry concerns the Jenkins Active Directory Plugin (up to and including v2.2) that did not verify certificates when connecting to the Active Directory server, enabling Man-in-the-Middle attacks. Affected component: Jenkins Active Directory Plugin; root cause: certificate verific...
CVE-2018-2649
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low...
CVE-2018-2649
CVE-2018-2649 details (NORMAL): Affects Oracle FLEXCUBE Universal Banking, part of Oracle Financial Services Applications (Infrastructure subcomponent). Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0. The vulnerability allows a low-privilege attacker wit...
CVE-2018-2649
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low...