CVE-2022-2652 Use of Externally-Controlled Format String in umlaeute/v4l2loopback

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

CVE-2022-2652

CVE-2022-2652 concerns the v4l2loopback kernel module. The vulnerability arises from how format strings are crafted in the card label, allowing kernel stack memory leakage and, in some cases, a DoS via v4l2loopback crashing when the label is requested (e.g., with many %s modifiers). Multiple open...

CVE-2019-2652

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: Shopping Cart. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2019-2652

CVE-2019-2652 affects Oracle E-Business Suite iStore, Shopping Cart subcomponent. Vulnerable in supported E-Business Suite versions 12.1.1–12.2.8; attack surface is Oracle iStore via HTTP. The vulnerability allows an unauthenticated remote attacker with network access to compromise iStore and may...

CVE-2017-2652

It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that provides the dist-fork CLI command beyond the basic check for Overall/Read permission, allowing anyone with that permission to run arbitrary shell commands on all...

CVE-2017-2652

CVE-2017-2652 concerns Jenkins’ Distributed Fork plugin. It states that, through version 1.5.0, the dist-fork CLI command did not perform permission checks beyond Overall/Read, allowing any user with that permission to execute arbitrary shell commands on all connected nodes. Impact is arbitrary c...

CVE-2017-2652

It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that provides the dist-fork CLI command beyond the basic check for Overall/Read permission, allowing anyone with that permission to run arbitrary shell commands on all...

CVE-2014-2652

OpenScape Deployment Service (DLS) vulnerability CVE-2014-2652 in multiple Unify/OpenScape deployments. The issue is a SQL injection in DLS before version 6.x and before 7.x R1.11.3, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component/version de...

CVE-2018-2652

The CVE-2018-2652 entry concerns Oracle’s PeopleSoft Enterprise PeopleTools (subcomponent Integration Broker ). Affected versions are 8.54, 8.55, and 8.56 . The vulnerability is described as allowing an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise Peop...

CVE-2016-2652

CVE-2016-2652 is rejected/not used; this CVE does not represent an active vulnerability entry.

CVE-2016-2652

...

CVE-2015-2652

creationtimestamp| type| source ---|---|--- 2016-05-12 09:12:03+00:00| seen| MISP/57344868-a120-4004-90f6-4c49950d210f...

CVE-2015-2652

Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Web Management...

CVE-2015-2652

Technical details for CVE-2015-2652 are not publicly available in the provided documents. No concrete information on affected product versions, impact, or remediation is present here; monitor for updates from official advisories.

CVE-2015-2652

Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Web Management...

Ubuntu: Security Advisory (USN-2652-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2652-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2652-1 advisory. It was discovered that Chromium did not properly consider the scheme when determining whether a URL is associated with a WebUI SiteInstance. If a user we...

openSUSE Security Update : kvm (openSUSE-SU-2012:0832-1)

fix vulnerability to temporary file symlink attacks in snapshot file mode. bnc764526 CVE-2012-2652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-364. The text description of...

CVE-2013-2652

CRLF injection vulnerability in WebCollab

[ISecAuditors Security Advisories] HTTP Response Splitting Vulnerability in WebCollab <= v3.30

============================================= INTERNET SECURITY AUDITORS ALERT 2013-011 - Original release date: March 21st, 2013 - Last revised: March 21st, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 5/10 CVSS Base Score - CVE-ID: CVE-2013-2652...