CVE-2023-2907

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Marksoft allows SQL Injection. This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605...

CVE-2023-2907 SQLi in Marksoft

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Marksoft allows SQL Injection. This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605...

CVE-2023-2907

CVE-2023-2907 is a SQL injection vulnerability affecting Marksoft components: Mobile‑v7.1.7, Login‑v1.4, and API‑20230605. The issue arises from improper neutralization of special elements in SQL commands, allowing an attacker to potentially manipulate queries. Connected sources corroborate an SQ...

SUSE CVE-2013-2907

The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2022-2907

creationtimestamp| type| source ---|---|--- 2023-01-18 00:15:39+00:00| seen| https://t.me/cibsecurity/56632...

CVE-2022-2907

CVE-2022-2907 affects GitLab CE/EE, with affected ranges: 12.9–15.1.5, 15.2.0–15.2.3, and 15.3.0–15.3.1. An unauthenticated user could read repository content when a project member accessed a crafted link. The CVE is linked to fixes in GitLab: upgrade to 15.1.6, 15.2.4, or 15.3.2 to address this ...

Security Bulletin: TADDM affected by multiple vulnerabilities due to JRuby and Hyperic HQ

Summary IBM Tivoli Application Dependency Discovery Manager is vulnerable to denial of service due to use of JRuby CVE-2011-4838 and cross site scripting due to use of Hyperic HQ CVE-2009-2907, CVE-2009-2899 Vulnerability Details CVEID:CVE-2009-2907 DESCRIPTION: Hyperic HQ is vulnerable to...

Security Advisory 0079

Security Advisory 0079 . CSAF PDF Date: July 26th, 2022 Revision | Date | Changes ---|---|--- 1.0 | July 26th 2022 | Initial release CVE-2022-2907 The CVE-ID tracking this issue: CVE-2022-29071 CVSSv3.1 Base Score: 4.0 AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Common Weakness Enumeration CWE: CWE-200...

Mageia: Security Advisory (MGASA-2013-0306)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2907-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2907-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : Virtualbox (openSUSE-2020-925)

Virtualbox was updated to 6.0.22 released May 15 2020 by Oracle This is a maintenance release. The following items were fixed and/or added : Guest Additions: Build problems fix with Oracle Linux 8.2 Red Hat compatible kernel / Red Hat Enterprise Linux 8.2 / CentOS 8.2 bug 19391 Guest...

RHEL 8 : thunderbird (RHSA-2020:2907)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2907 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 68.10.0. Security Fixes: Mozilla:...

CVE-2020-2907

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

CVE-2020-2907

CVE-2020-2907 affects the Core of Oracle VM VirtualBox. Affected are VirtualBox versions prior to 5.2.40, 6.0.20, and 6.1.6. The vulnerability is described as difficult to exploit but allows a high-privileged attacker with local access to compromise VirtualBox, potentially impacting other product...

Oracle VirtualBox Security Update (cpuapr2020 - 01) - Mac OS X

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2019-2907

Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware component: SOAP with Attachments API for Java. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

CVE-2019-2907

CVE-2019-2907 affects Oracle Fusion Middleware Web Services (SOAP with Attachments API for Java) with version 12.2.1.3.0. A remote, unauthenticated attacker can exploit over HTTP to write or delete data and read data via Oracle Web Services. Root cause and exact exploit details are not expanded b...

CVE-2018-2907

The CVE-2018-2907 entry concerns Oracle Hyperion’s Hyperion Financial Reporting component (subcomponent: Security Models). Affected product: Hyperion Financial Reporting version 11.1.2. The vulnerability description states an unauthenticated, network-accessible issue over HTTP that could allow ac...

Debian DSA-4248-1 : blender - security update

Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files AVI, BMP, HDR, CIN, IRIS, PNG, TIFF may result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive tex...