CVE-2022-2701

creationtimestamp| type| source ---|---|--- 2022-08-08 16:23:28+00:00| seen| https://t.me/cibsecurity/47717...

CVE-2022-2701

The CVE-2022-2701 entry concerns SourceCodester Simple E-Learning System. A cross-site scripting (XSS) vulnerability is triggered by manipulating the Bio parameter in the file /claire_blake, affecting unknown code paths. The attack is remote, and public exploits have been disclosed. Multiple conn...

CVE-2022-2701 SourceCodester Simple E-Learning System claire_blake cross site scripting

A vulnerability classified as problematic was found in SourceCodester Simple E-Learning System. This vulnerability affects unknown code of the file /claireblake. The manipulation of the argument Bio leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...

Mageia: Security Advisory (MGASA-2020-0065)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle VirtualBox Security Update (cpujan2020 - 01) - Mac OS X

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2020-2701

CVE-2020-2701 affects Oracle VM VirtualBox (Core) with affected versions prior to 5.2.36, 6.0.16 and 6.1.2. The vulnerability is described as difficult to exploit but can allow a high-privilege attacker with local logon to compromise Oracle VM VirtualBox, potentially leading to takeover of the Vi...

CVE-2019-2701

CVE-2019-2701 affects Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Web Access in the Primavera P6 EPPM component. The vulnerability is present in the 18.8 release and allows a low-privilege, unauthenticated or weakly authenticated attacker with network access over HTTP to re...

CVE-2019-2701

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

RHEL 6 / 7 : Red Hat JBoss Web Server 3.1.0 Service Pack 5 (RHSA-2018:2701)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2701 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache...

CVE-2018-2701

CVE-2018-2701 affects Oracle Hospitality Cruise Fleet Management (Emergency Response System) v9.0.4.0. The connected sources reiter that a vulnerability exists in this component that could be exploited by a low-privilege, network-based attacker via HTTP, with user interaction required, potentiall...

CVE-2017-2701

Mate 9 with software MHA-AL00AC00B125 has a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable...

tutu.ru XSS vulnerability

Vulnerable URL: https://www.tutu.ru/captcha/%22%3E%3Csvg%20onload=alert'XSSPOSED'%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2701 VIP website status:| Yes Coordinated...

CVE-2016-2701

This CVE entry is rejected/not used; it does not represent an active vulnerability entry.

CVE-2016-2701

...

Ubuntu: Security Advisory (USN-2701-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2701

The CVE concerns the WordPress plugin Social Sharing Toolkit version 2.1.1, where a Cross-Site Request Forgery (CSRF) vulnerability allows remote attackers to hijack administrator sessions and perform plugin-setting changes. The root cause is CSRF in the plugin’s handling of requests that mutate ...

CVE-2013-2701

Cross-site request forgery CSRF vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors...

CVE-2012-2701

CVE-2012-2701 is a duplicate of CVE-2012-2341. The connected records indicate a Cross-site request forgery (CSRF) vulnerability in the Drupal Take Control module (6.x-2.x) before 6.x-2.2, allowing remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate...

CVE-2011-2701

The CVE-2011-2701 issue affects FreeRADIUS 2.1.11 where the OCSP check in rlm_eap_tls.c mishandles OCSP replies when OCSP is enabled, enabling a remote attacker to bypass authentication in EAP-TLS using a revoked X.509 client certificate. Public disclosures across advisories (Mandriva MDVSA-2012:...

CVE-2010-2701

CVE-2010-2701 affects FathFTP ActiveX Control 1.7. Multiple buffer overflows in GetFromURL and RasIsConnected allow remote code execution. Public sources show exploits and references (e.g., xforce/Exploit-DB). OpenVAS entries note Prone to multiple buffer overflows; no vendor patch is provided in...