94 matches found
CVE-2022-2709 Float to Top Button <= 2.3.6 - Admin+ Stored Cross-Site Scripting
The Float to Top Button WordPress plugin through 2.3.6 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
SUSE: Security Advisory (SUSE-SU-2015:0978-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2709
The CVE-2020-2709 vulnerability affects Oracle iLearning 6.1, specifically the Learner Pages component. It is exploitable over HTTP by an unauthenticated attacker with network access; however, successful exploitation requires user interaction (UI:R) and can lead to unauthorized update/insert/dele...
Oracle iLearning CVE-2020-2709 Remote Security Vulnerability
Description Oracle iLearning is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Learner Pages' component is affected. This vulnerability affects the following supported versions: 6.1 Technologies Affected Oracle iLearning 6.1...
openSUSE: Security Advisory for LibreOffice (openSUSE-SU-2019:2709-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-2709
CVE-2019-2709 affects Oracle Transportation Management within Oracle Supply Chain Products Suite. Affects versions 6.3.7, 6.4.2 and 6.4.3. The vulnerability enables an unauthenticated attacker with network access over HTTP to potentially compromise data, with possible unauthorized updates, insert...
Security Bulletin: Open Source Mozilla Firefox vulnerability in IBM Storwize V7000 Unified (CVE-2015-0801, CVE-2015-0807, CVE-2015-0813, CVE-2015-0815, CVE-2015-0816,CVE-2015-0817, CVE-2015-0818, CVE-2015-2708, CVE-2015-2709)
Summary A fix is available for IBM Storwize V7000 Unified, for the Open Source Mozilla Firefox security vulnerabilities found in March 2015. Vulnerability Details IBM Storwize V7000 Unified is shipped with Mozilla Firefox .There are vulnerabilities in certain versions of Mozilla Firefox shipped i...
Security Bulletin: Open Source Mozilla Firefox vulnerability in IBM SONAS (CVE-2015-0801, CVE-2015-0807, CVE-2015-0813, CVE-2015-0815, CVE-2015-0816,CVE-2015-0817, CVE-2015-0818, CVE-2015-2708, CVE-2015-2709)
Summary A fix is available for IBM SONAS, for the Open Source Mozilla Firefox security vulnerabilities found inMarch 2015. Vulnerability Details IBM SONAS is shipped with Mozilla Firefox.There are vulnerabilities in certain versions of Mozilla Firefox shipped in certain versions of IBM SONAS. Thi...
CVE-2018-2709
CVE-2018-2709 affects the Oracle Banking Corporate Lending Core module of Oracle Financial Services Applications , with impacted versions 12.3.0 and 12.4.0 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data confidentiality, per CVSSv3.0 base score...
CVE-2017-2709
CVE-2017-2709 affects Huawei HiGame (pre-7.3.0) and SkyTone (pre-8.1.1) apps. The vulnerability stems from insufficient input validation in/core apps that process malformed packets, enabling a denial-of-service when a user installs a malicious application. Impact is DoS on affected devices; no in...
CVE-2009-2709
This CVE entry is rejected/not used; the candidate number was not associated with a vulnerability.
biqle.ru XSS vulnerability
Vulnerable URL: https://biqle.ru/video/%3C/title%3E%3Cscript%3E1;X%3DFunction"","%5C141%5C154%5C145%5C162%5C164XSSPOSED";X%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...
Mageia: Security Advisory (MGASA-2015-0342)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-2709-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : pollinate update (USN-2709-2)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2709-2 advisory. USN-2709-1 updated pollinate's certificate for entropy.ubuntu.com but did not include a new certificate authority certificate. This update fixes the problem. We...
Gentoo Security Advisory GLSA 201509-03
Gentoo Linux Local Security Checks GLSA 201509-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
GLSA-201509-03 : Cacti: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201509-03 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cacti. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code wit...
Ubuntu 14.04 LTS : pollinate update (USN-2709-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2709-1 advisory. The pollinate package bundles the certificate for entropy.ubuntu.com. This update refreshes the certificate to match the new certificate for the server. Tenable h...