77 matches found
CVE-2023-2863
The CVE-2023-2863 entry concerns Simple Design Daily Journal 1.012.GP.B (Android). Affected is an unknown SQLite Database functionality that allows cleartext storage to a file or on disk. The attack can be launched on the local host; the exploit has been publicly disclosed. Connected sources corr...
CVE-2023-2863 Simple Design Daily Journal SQLite Database cleartext storage in a file or on disk
A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. It is possible to launc...
Oracle Linux 8 : ctags (ELSA-2023-2863)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2863 advisory. 5.8-23 - CVE-2022-4515, arbitrary code execution issue Resolves: rhbz2153787 Tenable has extracted the preceding description block directly from the Oracle Linu...
RHEL 8 : ctags (RHSA-2023:2863)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2863 advisory. Ctags is a C programming language indexing and cross-reference tool. Security Fixes: ctags: arbitrary command execution via a tag file with a crafted...
CentOS 8 : ctags (CESA-2023:2863)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:2863 advisory. - A flaw was found in Exuberant Ctags in the way it handles the -o option. This option specifies the tag filename. A crafted tag filename specified in the comma...
SUSE CVE-2008-2373
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-2863. Reason: This candidate is a reservation duplicate of CVE-2008-2863. Notes: All CVE users should reference CVE-2008-2863 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...
WordPress WPvivid Backup Path Traversal Vulnerability
Wordpress plugin - WPvivid Backup - Version 0.9.76 Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents================================================== Overview Detailed description Timeline of disclosure Thanks & Acknowledgements Reference...
WordPress WPvivid Backup Path Traversal
===== Tempest Security Intelligence - ADV-15/2022 ========================== Wordpress plugin - WPvivid Backup - Version 0.9.76 Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents================================================== Overview...
CVE-2022-2863
Summary (CVE-2022-2863): The WordPress plugin WPvivid Backup (Migration, Backup, Staging) before version 0.9.76 is affected by a local file inclusion vulnerability. The issue arises because the plugin does not sanitize/validate a parameter before using it to read a file, enabling high-privilege u...
CVE-2022-2863 WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read
The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack...
Debian DLA-2863-1 : firefox-esr - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2863 advisory. Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information...
RHEL 8 : Red Hat OpenShift Service Mesh 1.0 servicemesh-prometheus (RHSA-2020:2863)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2863 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift...
CVE-2011-2863
creationtimestamp| type| source ---|---|--- 2020-06-04 02:55:25+00:00| seen| https://t.me/cibsecurity/12539...
CVE-2011-2863
Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
CVE-2011-2863
The CVE describes an information-disclosure vulnerability in Google Chrome’s V8 JavaScript engine, occurring in versions before 14.0.0.0 due to insufficient policy enforcement. A remote attacker could obtain potentially sensitive information from process memory via a crafted HTML page. Affected p...
CVE-2011-2863
Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
CVE-2011-2863
Removed by vendor...
CVE-2020-2863
CVE-2020-2863 is for Oracle E-Business Suite, Oracle Advanced Outbound Telephony (UI) with affected versions 12.1.1–12.1.3. The flaw allows a low-privileged, unauthenticated attacker over HTTP to access Oracle Advanced Outbound Telephony data and may lead to unauthorized read and, to a lesser ext...
CVE-2020-2863
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...
Oracle Linux 6 : kernel (ELSA-2019-2863)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2863 advisory. 2.6.32-754.23.1.OL6 - Update genkey bug 25599697 2.6.32-754.23.1 - vhost vhost: make sure lognum innum Eugenio Perez 1750869 1750869 CVE-2019-14835 Tenable has...