20 matches found
CVE-2024-28323
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
CVE-2024-28323
creationtimestamp| type| source ---|---|--- 2024-03-14 15:26:47+00:00| seen| https://t.me/ctinow/207862...
CVE-2024-28323
The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection...
CVE-2024-28323
The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection...
CVE-2024-28323
The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection...
CVE-2024-28323
The vulnerability CVE-2024-28323 affects Phpgurukul User Registration & Login and User Management System v3.1. The bwdates-report-result.php script accepts user-provided date inputs without proper validation, enabling SQL injection via that input path. This could impact data integrity and confide...
CVE-2023-28323
creationtimestamp| type| source ---|---|--- 2023-07-01 07:15:43+00:00| seen| https://t.me/cibsecurity/65838...
CVE-2023-28323
A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS Operating System vulnerabilities to escalate privileges on the machine or be used as a...
CVE-2023-28323
CVE-2023-28323 affects Ivanti Endpoint Manager (EPM) versions prior to 2022 SU3, via a deserialization of untrusted data that allows an unauthenticated user to escalate privileges. The described impact is unauthenticated remote privilege escalation, potentially enabling escalation alongside other...
CVE-2022-28323
creationtimestamp| type| source ---|---|--- 2022-04-30 20:26:08+00:00| seen| https://t.me/cibsecurity/41692...
CVE-2022-28323
An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,...
CVE-2022-28323
CVE-2022-28323 concerns MediaWiki up to 1.37.2 with the SecurePoll extension. The issue is a leak caused by sorting by timestamp being supported, enabling exposure of information that should be restricted. The CVSS metrics indicate base scores of 5.0 (AV:N/AC:L/PR:N/UI:N/S:U/C:P/I:N/A:N) and 7.5 ...
CVE-2021-28323
Windows DNS Information Disclosure Vulnerability...
CVE-2021-28323 Windows DNS Information Disclosure Vulnerability
...
CVE-2021-28323
Technical details about CVE-2021-28323 are not provided in the supplied documents. Public disclosures, impacted products, root cause, and fixes are not specified here. Monitor for updates.
KB5001389: Windows Server 2008 Security Update (Apr 2021)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - Windows Kernel Information Disclosure Vulnerability CVE-2021-27093, CVE-2021-28309 - Windows Media...
KB5001347: Windows 10 version 1607 / Windows Server 2016 Security Update (Apr 2021)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Microsoft Internet Messaging API Remote Code...
KB5001342: Windows 10 version 1809 / Windows Server 2019 Security Update (Apr 2021)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...