CVE-2022-2705

creationtimestamp| type| source ---|---|--- 2022-08-08 16:23:26+00:00| seen| https://t.me/cibsecurity/47715...

CVE-2022-2705

CVE-2022-2705 affects SourceCodester Simple Student Information System, with a SQL injection in admin/departments/manage_department.php via the id parameter (example input: -5756%27%20UNION%20ALL%20SELECT%20NULL,database(),user(),NULL,NULL,NULL,NULL--). Multiple sources confirm the vulnerability ...

CVE-2022-2705 SourceCodester Simple Student Information System manage_department.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/managedepartment.php. The manipulation of the argument id with the input...

Mageia: Security Advisory (MGASA-2020-0065)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2705-1 : scilab - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2705 advisory. Multiple issues have been discovered in scilab, particularly in ezXML embedded library: CVE-2021-30485 Descriptionincorrect memory handling, leading to a NULL...

SUSE: Security Advisory (SUSE-SU-2012:0147-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle VirtualBox Security Update (cpujan2020 - 01) - Mac OS X

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2020-2705

CVE-2020-2705 affects Oracle VM VirtualBox (Core) on multiple lines: vulnerable versions include Oracle VM VirtualBox prior to 5.2.36, 6.0.x prior to 6.0.16, and 6.1.x prior to 6.1.2. The advisory notes an easily exploitable vulnerability that lets a low-privilege, logon-allowed attacker compromi...

CVE-2019-2705

CVE-2019-2705 is a vulnerability in Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected are Oracle Outside In Technology 8.5.3 and 8.5.4. The issue allows an unauthenticated, network-accessible attacker (via HTTP) to cause a hang or crash (DOS) and potenti...

MongoDB 2.6.x < 2.6.9, 3.0.x < 3.0.14, 3.2.x < 3.2.8 mongod

The version of the remote MongoDB server is 2.6.x prior to 2.6.9, is 3.0.x 3.0.14 or is 3.2.x 3.2.8. It is, therefore, affected by multiple vulnerabilities. - A credentials disclosure vulnerability exists in the PEMKeyPassword, clusterPassword and Windows servicePassword. An unauthenticated local...

CVE-2018-2705

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2018-2705

CVE-2018-2705 affects Oracle Banking Payments (Payments Core) in Oracle Financial Services Applications, with affected versions 12.3.0 and 12.4.0. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP and can compromise Oracle Banking Payments, potentially l...

CVE-2017-2705

CVE-2017-2705 affects Huawei P9 smartphones and allows an unauthenticated attacker to bypass phone activation and reach the settings page. Affected devices are Huawei P9 models with versions earlier than EVA-AL10C00B365, EVA-AL00C00B365, EVA-CL00C92B365, EVA-DL00C17B365, and EVA-TL00C01B365. The ...

CVE-2016-2705

CVE-2016-2705 is rejected/not used as explicitly stated in the Initial Description.

CVE-2016-2705

...

Security Advisory - Phone Activation Bypass Vulnerability in Huawei Smartphones

There is a phone activation bypass vulnerability in Huawei smartphones. Successful exploit could allow an unauthenticated attacker to bypass phone activation to settings page of the phone. Vulnerability ID: HWPSIRT-2016-12004 This vulnerability has been assigned CVE ID: CVE-2017-2705. Huawei has...

Ubuntu 14.04 LTS : Keystone vulnerabilities (USN-2705-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2705-1 advisory. Qin Zhao discovered Keystone disabled certification verification when the insecure option is set in a paste configuration paste.ini file regardless of th...

[SECURITY] [DLA 235-1] ruby1.9.1 security update

Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u4 CVE ID : CVE-2011-0188 CVE-2011-2705 CVE-2012-4522 CVE-2013-0256 CVE-2013-2065 CVE-2015-1855 CVE-2011-0188 The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and oth...

DLA-235-1 ruby1.9.1 - security update

Bulletin has no description...

Debian DLA-88-1 : ruby1.8 security update

This update fixes multiple local and remote denial of service and remote code execute problems : CVE-2011-0188 Properly allocate memory, to prevent arbitrary code execution or application crash. Reported by Drew Yao. CVE-2011-2686 Reinitialize the random seed when forking to prevent CVE-2003-0900...