CBL Mariner 2.0 Security Update: libdb (CVE-2019-2708)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-2708 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prio...

RHEL 6 : libdb (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libdb: Reads DBCONFIG from the current working directory CVE-2017-10140 - Vulnerability in the Data Store...

CVE-2024-2708

A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has be...

CVE-2024-2708

CVE-2024-2708 affects Tenda AC10U, specifically the /goform/execCommand formexeCommand function. The vulnerability stems from a stack-based buffer overflow triggered by manipulating the cmdinput argument, potentially allowing a remote attacker to execute arbitrary code on the device. Public explo...

CVE-2019-2708 affecting package libdb for versions less than 5.3.28-7

CVE-2019-2708 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...

Malicious code in wlwz-2312-2708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8cc811f48ffb917458af4f083977cf72d87ee76c1f0ad45b8b20138f603ca78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rocky Linux 8 : libdb (RLSA-2021:1675)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1675 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32...

CVE-2023-2708

creationtimestamp| type| source ---|---|--- 2023-05-16 07:30:04+00:00| seen| https://t.me/cibsecurity/64197...

CVE-2023-2708

CVE-2023-2708 affects the Video Gallery plugin for WordPress (≤ 1.0.10). Root cause: insufficient input sanitization and output escaping of the search_term parameter, enabling reflected XSS. Impact: potentially exploited by unauthenticated attackers who lure victims to perform actions triggering ...

CVE-2023-2708 Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting

The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘searchterm’ parameter in versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2023-2708 Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting

The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘searchterm’ parameter in versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

Huawei EulerOS: Security Advisory for libdb (EulerOS-SA-2023-1734)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : libdb (EulerOS-SA-2023-1734)

According to the versions of the libdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to...

SUSE CVE-2014-2708

Multiple SQL injection vulnerabilities in graphxport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the 1 graphstart, 2 graphend, 3 graphheight, 4 graphwidth, 5 graphnolegend, 6 printsource, 7 localgraphid, or 8 rraid parameter...

SUSE CVE-2015-2708

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

SUSE: Security Advisory (SUSE-SU-2022:4289-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:4289-1 Security update for libdb-4_8

This update for libdb-48 fixes the following issues: - CVE-2019-2708: Fixed partial DoS due to data store execution bsc1174414...

SUSE SLED15: db48-doc / db48-utils / libdb-4_8 / libdb-4_8-32bit / etc (SUSE-SU-2022:4214-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4214-1 advisory. - CVE-2019-2708: Fixed partial DoS due to data store execution bsc1174414. Tenable has extracted the...

SUSE-SU-2022:4214-1 Security update for libdb-4_8

This update for libdb-48 fixes the following issues: - CVE-2019-2708: Fixed partial DoS due to data store execution bsc1174414...

Huawei EulerOS: Security Advisory for libdb (EulerOS-SA-2022-2511)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...