117 matches found
CVE-2026-2847
creationtimestamp| type| source ---|---|--- 2026-02-24 17:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmnd5r24u2w...
CVE-2019-2847
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low...
CVE-2014-2847
SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter...
CVE-2025-2847
creationtimestamp| type| source ---|---|--- 2025-03-27 13:26:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9073 2025-03-27 14:58:21+00:00| seen| https://t.me/cvedetector/21273...
CVE-2025-2847 Codezips Gym Management System over_month.php sql injection
A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The...
WordPress WordPress File Upload Plugin <= 4.24.5 is vulnerable to Cross Site Scripting (XSS)
Software WordPress File Upload Type Plugin Vulnerable versions = 4.24.5 Fixed in 4.24.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2847 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 52cb83e8b1a8 Credits Krzysztof Zając...
forum-polonicum.de Improper Access Control vulnerability OBB-3818697
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-2847
creationtimestamp| type| source ---|---|--- 2023-06-15 12:36:12+00:00| seen| https://t.me/cibsecurity/65259...
CVE-2023-2847
CVE-2023-2847 describes a local privilege escalation in ESET products for Linux/macOS caused by improper privilege management. A user with lower privileges could trigger actions with root-level privileges; affected components include ESET Server Security for Linux, Endpoint Antivirus for Linux/ma...
CVE-2023-2847 Local privilege escalation in ESET products for Linux and MacOS
During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied th...
SUSE SLES12 Security Update : zlib (SUSE-SU-2022:2847-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2847-1 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE...
SUSE: Security Advisory (SUSE-SU-2022:2847-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2847
creationtimestamp| type| source ---|---|--- 2022-08-16 22:39:29+00:00| seen| https://t.me/cibsecurity/48244...
CVE-2022-2847 SourceCodester Guest Management System front.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Guest Management System. This issue affects some unknown processing of the file /guestmanagement/front.php. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The...
CVE-2022-2847
CVE-2022-2847 affects SourceCodester Guest Management System. The vulnerability is a SQL injection in the file /guestmanagement/front.php, caused by manipulating the rid parameter. This could be exploited remotely; multiple sources note that the exploit has been disclosed publicly (VDB-206489). I...
SUSE: Security Advisory (SUSE-SU-2016:2074-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:1696-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ojodeagua.global Improper Access Control vulnerability OBB-1379899
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
RHEL 8 : nodejs:12 (RHSA-2020:2847)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2847 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
CVE-2020-2847
CVE-2020-2847 affects Oracle E-Business Suite Depot Repair (component: Estimate and Actual Charges) on affected 12.1.1–12.1.3. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, with user interaction required, to gain unauthorized access to Depot Repair data ...