Lucene search
+L

97 matches found

CVE
CVE
added 2023/11/27 4:22 p.m.69 views

CVE-2023-2707

CVE-2023-2707 affects the gAppointments WordPress plugin (versions

4.8CVSS4.7AI score0.00418EPSS
SaveExploits1References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:20 a.m.5 views

SUSE CVE-2015-2265

The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...

7.5CVSS7.8AI score0.02958EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2022/08/10 12:0 a.m.14 views

openSUSE: Security Advisory for java-11-openjdk (SUSE-SU-2022:2707-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.3AI score0.33623EPSS
SaveExploits2References2
Circl
Circl
added 2022/08/08 4:23 p.m.9 views

CVE-2022-2707

creationtimestamp| type| source ---|---|--- 2022-08-08 16:23:27+00:00| seen| https://t.me/cibsecurity/47716...

9.8CVSS8.7AI score0.00625EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/08/08 12:50 p.m.35 views

CVE-2022-2707 SourceCodester Online Class and Exam Scheduling System faculty_sched.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/facultysched.php. The manipulation of the argument faculty with the input ' OR SELECT 2078 FROMSELECT...

6.3CVSS10AI score0.00625EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/08 12:50 p.m.60 views

CVE-2022-2707

SourceCodester Online Class and Exam Scheduling System 1.0 is affected by a SQL injection in /pages/faculty_sched.php via the faculty parameter. The root cause is unsafely concatenated user input leading to injection, with remote exploitation demonstrated by public disclosure (VDB-205831). Exploi...

9.8CVSS9.8AI score0.00625EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.11 views

Mageia: Security Advisory (MGASA-2014-0181)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.2AI score0.01174EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2019:2707-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.0217EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/11/18 12:0 a.m.237 views

RHEL 6 : microcode_ctl (RHSA-2020:2707)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2707 advisory. Security Fixes: hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: L1D Cache Eviction Sampling CVE-2020-0549 hw: Vector...

5.5CVSS7.2AI score0.00587EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2020/01/17 12:0 a.m.36 views

Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (Jan 2020 CPU)

According to its self-reported version number, the Oracle Primavera P6 EnterpriseProject Portfolio Management EPPM installation running on the remote web server is 15.x prior to 15.2.18.8, 16.x prior to 16.2.19.2, 17.x prior to 17.12.16.1, or 18.8.x prior to 18.8.16., or 19.12.1.0. It is,...

7.3CVSS6.9AI score0.02469EPSS
SaveExploits1References4
CVE
CVE
added 2020/01/15 4:34 p.m.57 views

CVE-2020-2707

CVE-2020-2707 concerns Oracle Primavera P6 EPPM WebAccess. Affected versions are 15.1.0.0–15.2.18.7, 16.1.0.0–16.2.19.0, 17.1.0.0–17.12.16.0, 18.1.0.0–18.8.16.0 and 19.12.0.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, with user interaction require...

5.4CVSS4.9AI score0.0074EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.12 views

Rockwell Automation DeviceView 2707-DNC Generic

Binary data 752218.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.14 views

Rockwell Automation DTAM Plus - Operator Interface Module 2707-xxxPxxD Generic

Binary data 752219.prm...

7.3AI score
SaveExploits0
NVD
NVD
added 2019/04/23 7:32 p.m.19 views

CVE-2019-2707

Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management component of Oracle PeopleSoft Products subcomponent: Application Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.3AI score0.00942EPSS
SaveExploits0References1
CVE
CVE
added 2019/04/23 6:16 p.m.49 views

CVE-2019-2707

CVE-2019-2707 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise ELM (Enterprise Learning Management) component, subcomponent Application Search, version 9.2. The issue is exploitable by an unauthenticated attacker over HTTP with network access. Attacks require user intera...

6.1CVSS5.5AI score0.00942EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2018/01/18 2:0 a.m.44 views

CVE-2018-2707

The CVE-2018-2707 entry describes a vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (Core module). Affected versions are 12.3.0 and 12.4.0. The flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking...

8.1CVSS7.7AI score0.01618EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/11/22 7:29 p.m.5 views

CVE-2017-2707

Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...

7.1CVSS5.8AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2017/11/22 7:29 p.m.19 views

CVE-2017-2707

Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...

7.1CVSS7AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2017/11/22 7:0 p.m.54 views

CVE-2017-2707

CVE-2017-2707 pertains to Huawei Mate 9 devices with software MHA-AL00AC00B125, where a privilege-escalation flaw in the Push module can be triggered by a user-saving malicious rich-media in a message. The underlying issue enables an attacker to delete messages or impersonate the user to send mes...

7.1CVSS7AI score0.00278EPSS
SaveExploits0References1Affected Software1
Huawei
Huawei
added 2017/07/12 12:0 a.m.31 views

Security Advisory - Privilege Escalation Vulnerability in Push Module of Huawei Smart Phone

There is a privilege escalation vulnerability in Push module of Huawei Smart Phone. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message. Vulnerability ID: HWPSIRT-2017-05070...

7.1CVSS7AI score0.00278EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder