19 matches found
CVE-2023-28700
creationtimestamp| type| source ---|---|--- 2025-01-08 18:16:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/758...
CVE-2023-28700 ITPison OMICARD EDM - Arbitrary File Upload
OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt servic...
CVE-2023-28700 ITPison OMICARD EDM - Arbitrary File Upload
OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt servic...
CVE-2023-28700
Summary: CVE-2023-28700 affects the OMICARD EDM backend system. The file-upload function does not restrict dangerous file types. A LAN attacker with administrator privileges can upload and run arbitrary executables, enabling arbitrary system commands or service disruption. Root cause (as describe...
WordPress GiveWP Plugin <= 2.20.2 Multiple Vulnerabilities
The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
CVE-2022-28700
creationtimestamp| type| source ---|---|--- 2022-07-21 22:23:36+00:00| seen| https://t.me/cibsecurity/46772...
CVE-2022-28700
CVE-2022-28700 corresponds to a vulnerability in the WordPress GiveWP plugin, affected versions
CVE-2022-28700 WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability
Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...
No memory limit for dom0less domUs (XSA-383)
The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allows a domain to allocate memory beyond what an administrator originally configured. Note that Nessus has not tested for this issue...
[SECURITY] [DSA 4977-1] xen security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4977-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2021 https://www.debian.org/security/faq -...
openSUSE: Security Advisory for xen (openSUSE-SU-2021:2923-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE: Security Advisory (SUSE-SU-2021:2923-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2021:2922-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2021:2924-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for xen (important)
openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2021:2923-1 Rating: important References: 1027519 1176189 1179246 1183243 1183877 1185682 1186428 1186429 1186433 1186434 1187406 1188050 1189373 1189376 1189378 1189380 1189381 1189882 Cross-References: CVE-2021-0089...
CVE-2021-28700
creationtimestamp| type| source ---|---|--- 2021-08-27 22:28:38+00:00| seen| https://t.me/cibsecurity/27968...
CVE-2021-28700
xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allow a domain to allocate memory beyond what an administrator originally configured...
CVE-2021-28700
Summary: CVE-2021-28700 affects the Xen hypervisor, specifically the dom0less domU path on ARM, where the memory limit for unprivileged domains is not set. This can allow a domain to allocate more memory than configured. The issue is listed among Xen vulnerabilities (XSA-383) and appears in multi...
CVE-2021-28700
No description is available for this CVE...