54 matches found
CVE-2022-2747 SourceCodester Simple Online Book Store book.php sql injection
A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...
SUSE: Security Advisory (SUSE-SU-2020:2747-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:2747-1)
This update for MozillaFirefox fixes the following issues : -Firefox was updated to 78.3.0 ESR bsc1176756, MFSA 2020-43 - CVE-2020-15677: Download origin spoofing via redirect - CVE-2020-15676: Fixed an XSS when pasting attacker-controlled data into a contenteditable element - CVE-2020-15678: Whe...
CVE-2020-2747
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: SSO Engine. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manage...
CVE-2020-2747
CVE-2020-2747 affects Oracle Access Manager (SSO Engine) in Oracle Fusion Middleware. A remote attacker with network access over HTTP and low privileges can exploit the flaw to update/insert/delete data or read restricted Oracle Access Manager data on affected versions 11.1.2.3.0 and 12.2.1.3.0; ...
Oracle MySQL Server 8.0 <= 8.0.12 Security Update (cpujul2019) - Windows
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
Oracle MySQL Server 8.0 <= 8.0.12 Security Update (cpujul2019) - Linux
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
CVE-2019-2747 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2019-2747
CVE-2019-2747 affects Oracle MySQL Server (subcomponent: GIS) with affected versions 8.0.12 and earlier. Exploitation requires network access and high privileges; successful attacks can cause a hang or complete denial of service of MySQL Server (A: H, U: N, I: N, A: H). Public references in this ...
CVE-2018-2747
Oracle Financial Services Applications – Banking Corporate Lending Core module (versions 12.3.0, 12.4.0, 12.5.0 and 14.0.0) is affected by CVE-2018-2747. A low-privilege, network-accessible attacker via HTTP can access data in the Banking Corporate Lending component, leading to potential unauthor...
CVE-2016-2747
CVE-2016-2747 is rejected/not used; this candidate does not represent an active vulnerability.
ibtimes.com XSS vulnerability
Vulnerable URL: http://www.ibtimes.com/search/site/%27%22%252f%3E%3E%3C%252fscript%3E%3Cscript%3Ealert%28%252fOPENBUGBOUNTY%252f%29%3C%252fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
Ubuntu 14.04 LTS : NVIDIA graphics drivers vulnerability (USN-2747-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2747-1 advisory. Dario Weisser discovered that the NVIDIA graphics drivers incorrectly handled certain IOCTL writes. A local attacker could use this issue to possibly gain root...
CVE-2015-2747
CVE-2015-2747 corresponds to multiple XSS/HTML injection vulnerabilities in Websense TRITON/V-Series products. Public sources confirm affected components include the DLP/Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 (initial CVE description), with connected CNVD data indicating HTML...
Media Player Classic 1.3.1752.0 / 1.3.1249.0 Memory Corruption
Exploit Title: Media Player Classic Memory Corruption Date: 2014/04/13 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: http://mpc-hc.org/ Software Link:...
CVE-2013-2747
The CVE-2013-2747 affects Courion Access Risk Management Suite (Version 8 Update 9). The password reset feature allows remote authenticated users to bypass Internet Explorer usage restrictions and execute arbitrary commands by using keyboard shortcuts to navigate the file system and open a comman...
CVE-2012-2747
Technical details about CVE-2012-2747 are not provided in the supplied documents; no affected versions, root cause, or remediation details are disclosed. Monitor for updates.
CVE-2009-2747
CVE-2009-2747 affects IBM WebSphere Application Server’s JNDI implementation. The root cause is improper access control on UserRegistry object methods, allowing remote attackers to disclose sensitive information via a crafted method call. Affected versions are WAS 6.0 prior to 6.0.2.39, 6.1 prior...
CVE-2011-2747
Google Picasa is affected by CVE-2011-2747: on Windows, versions before 3.6 Build 105.67 fail to properly handle invalid properties in JPEG images, allowing remote code execution via a crafted image file. The underlying issue is in how Picasa processes certain JPEG properties, enabling arbitrary ...