96 matches found
CVE-2026-2683
A vulnerability was found in Tsinghua Unigroup Electronic Archives System 3.2.21080262532. The affected element is an unknown function of the file /Using/Subject/downLoad.html. Performing a manipulation of the argument path results in path traversal. The attack may be initiated remotely. The...
CVE-2023-2683
A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error...
CVE-2004-2683
Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows attackers to access arbitrary files on a server...
CVE-2025-2683
creationtimestamp| type| source ---|---|--- 2025-03-24 06:30:52+00:00| published-proof-of-concept| Telegram/kP9yqiAKfxVbjZsANaRhvdiBWIlMgbAXRpD9R63SjOi8KOg 2025-03-24 08:22:07+00:00| seen| https://t.me/cvedetector/20942 2025-03-24 08:24:09+00:00| seen|...
CVE-2025-2683
The CVE-2025-2683 entry applies to PHPGurukul Bank Locker Management System 1.0. A SQL injection vulnerability exists in profile.php, triggered by manipulating the mobilenumber parameter. The issue is exploitable remotely and has been disclosed publicly. Publicly available connected sources (CNVD...
CVE-2025-2683 PHPGurukul Bank Locker Management System profile.php sql injection
A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been...
Linux Distros Unpatched Vulnerability : CVE-2019-2683
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Options. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and...
CentOS 7 : dpdk (RHSA-2020:2683)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2683 advisory. - A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase could result in a smaller...
CVE-2024-2683 Campcodes Online Job Finder System index.php cross site scripting
A vulnerability classified as problematic was found in Campcodes Online Job Finder System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/company/index.php. The manipulation of the argument view leads to cross site scripting. The attack can be launched remotely...
CVE-2024-2683
The CVE-2024-2683 entry concerns Campcodes Online Job Finder System 1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /admin/company/index.php file, caused by manipulating the view parameter. It is exploitable remotely, and public exploit details have been disclosed. Affected fun...
EulerOS 2.0 SP11 : git (EulerOS-SA-2023-2683)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by...
CVE-2019-2683
creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5990...
CVE-2023-2683 Connection update while closing connection may lead to denial-of-service
A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error...
CVE-2023-2683
The CVE-2023-2683 entry concerns the Silicon Labs EFR32 Bluetooth LE stack (versions 5.1.0–5.1.1). A memory leak is triggered by an invalid pairing message, causing future legitimate connection attempts to fail; the issue is resolved by resetting the device. Connected documents consistently descr...
CVE-2023-2683 Connection update while closing connection may lead to denial-of-service
A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error...
Debian: Security Advisory (DLA-251-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2019-2683
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Options. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols ...
Ubuntu: Security Advisory (USN-3957-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2683 SourceCodester Simple Food Ordering System login.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password with the input "alert1 leads to cross site scripting. It is possible to initiate...
CVE-2022-2683 SourceCodester Simple Food Ordering System login.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password with the input "alert1 leads to cross site scripting. It is possible to initiate...