135 matches found
Amazon Linux 2 : libglvnd (ALAS-2025-2782)
The version of libglvnd installed on the remote host is prior to 1.0.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2782 advisory. libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen...
Linux Distros Unpatched Vulnerability : CVE-2016-2782
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The treoattach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service NULL...
WordPress FluentForm Plugin <= 5.1.16 is vulnerable to Broken Access Control
Software FluentForm Type Plugin Vulnerable versions = 5.1.16 Fixed in 5.1.17 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2782 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID c154cbdbc6dd Credits Tobias Weißhaar kun19 Required...
CVE-2024-2782
CVE-2024-2782 affects WordPress plugin Fluent Forms (Contact Form Plugin for Quiz, Survey, and Drag & Drop WP Form Builder) versions
CVE-2024-2782 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST API endpoint in all versions up to, and including,...
RHEL 7 : kernel (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kernel: out of bounds read in drivers/media/usb/dvb-usb/technisat-usb2.c CVE-2019-15505 - kernel: lack of...
BELL-CVE-2018-2782 CVE-2018-2782 does not affect BellSoft software
Bulletin has no description...
CVE-2023-2782
creationtimestamp| type| source ---|---|--- 2023-05-18 14:32:15+00:00| seen| https://t.me/cibsecurity/64387 2025-01-22 17:02:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2591...
CVE-2023-2782
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.3.1-38...
CVE-2023-2782
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.3.1-38...
CVE-2023-2782
CVE-2023-2782 (Acronis) : A vulnerability in Acronis Cyber Infrastructure (ACI) affects versions prior to 5.3.1-38, caused by improper authorization that enables disclosure of sensitive information. The affected component is the ACI platform itself (edge-focused infra solution). Exploitation deta...
CVE-2023-2782
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.3.1-38...
K32702281: Oracle MySQL vulnerabilities CVE-2018-2782, CVE-2018-2784, CVE-2018-2786, and CVE-2018-2787
Security Advisory Description CVE-2018-2782 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via...
SUSE CVE-2015-2782
Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ARJ archive...
SUSE CVE-2016-2782
The treoattach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by inserting a USB device that lacks a 1 bulk-in or 2...
CVE-2022-2782
creationtimestamp| type| source ---|---|--- 2022-12-07 02:41:35+00:00| seen| https://t.me/cibsecurity/52145 2025-05-07 19:22:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15388...
Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2022-2782)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2782
In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters...