100 matches found
CVE-2019-2672
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: Print Server. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2025-2672
A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adddeductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has be...
CVE-2025-2672
CVE-2025-2672 affects Code-Projects Payroll Management System 1.0. The vulnerability is a SQL injection in the file /add_deductions.php, triggered by manipulation of the bir parameter. The issue is remote-executable and has been described as critical based on vendor/NVD assessments; multiple sour...
CVE-2025-2672 code-projects Payroll Management System add_deductions.php sql injection
A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adddeductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has be...
CVE-2024-2672
creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:24+00:00| seen| Telegram/BznzmxeiVgMEET6hhgRfAJlac3sLZZNQ03QPM9lsjBCdRgze...
CVE-2020-2672
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Ema...
Amazon Linux 2 : qt5-qtgraphicaleffects (ALAS-2024-2672)
The version of qt5-qtgraphicaleffects installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2672 advisory. An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6...
RHCOS 4 : OpenShift Container Platform 4.14.24 (RHSA-2024:2672)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2672 advisory. - golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288 - buildah: full container escape ...
CVE-2024-2672 Campcodes Online Job Finder System controller.php sql injection
A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/user/controller.php. The manipulation of the argument UESRID leads to sql injection. The attack may be launched remotely. The...
CVE-2024-2672 Campcodes Online Job Finder System controller.php sql injection
A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/user/controller.php. The manipulation of the argument UESRID leads to sql injection. The attack may be launched remotely. The...
CVE-2024-2672
CVE-2024-2672 affects Campcodes Online Job Finder System 1.0. The Red Hat and vendor records confirm a SQL injection vulnerability in the /admin/user/controller.php file, triggered by manipulating the UESRID parameter. The issue is exploitable remotely and, per disclosures, the exploit is public....
CVE-2023-2672
CVE-2023-2672 affects SourceCodester Lost and Found Information System 1.0, specifically the file items/view.php’s GET parameter handler. The vulnerability arises from improper handling of the id parameter, enabling SQL injection that can be triggered remotely. Public exploits have been disclosed...
CVE-2022-2672
creationtimestamp| type| source ---|---|--- 2022-08-05 16:20:33+00:00| seen| https://t.me/cibsecurity/47604...
CVE-2022-2672
CVE-2022-2672 affects SourceCodester Garage Management System. The vulnerability is an SQL injection in an unknown function of the file createUser.php, triggered by manipulating the parameters userName/uemail. It can be exploited remotely and exploitation has been disclosed to the public (VDB-205...
openSUSE: Security Advisory for go1.18 (SUSE-SU-2022:2672-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2013-2672
CVE-2013-2672 affects Brother MFC-9970CDW devices running firmware 0D, where passwords may be submitted in cleartext. The NVD entry documents a network-remote risk with cleartext credential exposure (CVSS v3.1 base score 7.5, high impact on confidentiality; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). N...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1484)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2672
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Ema...
CVE-2020-2672
CVE-2020-2672 affects Oracle E-Business Suite’s Oracle Email Center (component: Message Display). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is exploitable by an unauthenticated attacker with network access over HTTPS and requires user interaction from a person other...
CVE-2019-2672
CVE-2019-2672 affects Oracle E-Business Suite One-to-One Fulfillment Print Server. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows unauthenticated, network-accessible access via HTTP, with user interaction required, potentially leading to unauthorized disclosure and m...