CVE-2019-2972

creationtimestamp| type| source ---|---|--- 2024-01-09 15:17:23+00:00| seen| https://t.me/ctinow/165054...

CVE-2023-2972

creationtimestamp| type| source ---|---|--- 2023-05-30 14:18:31+00:00| seen| https://t.me/cibsecurity/64779 2025-01-10 19:07:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1212...

CVE-2023-2972

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972

CVE-2023-2972 describes a prototype pollution vulnerability in the GitHub repository antfu/utils prior to 0.7.3. The issue is confirmed across multiple sources (NVD/OSV/GHSA) as a prototype contamination in the utility’s codebase. Reported impact in the CVE data indicates high-level risk, but the...

CVE-2022-2972 MZ Automation libIEC61850 Stack-Based Buffer Overflow

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code...

CVE-2022-2972 MZ Automation libIEC61850 Stack-Based Buffer Overflow

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code...

CVE-2022-2972

CVE-2022-2972 affects MZ Automation’s libIEC61850: stack-based buffer overflow in the library (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e). The flaw allows a crash or remote code execution due to unsanitized input used in memcpy. Impact is severe ...

CVE-2022-2972

creationtimestamp| type| source ---|---|--- 2022-09-09 18:30:04+00:00| seen| https://t.me/truesecator/3399 2022-09-09 19:20:23+00:00| seen| https://t.me/icscert/596 2022-09-23 20:43:40+00:00| seen| https://t.me/cibsecurity/50353...

SUSE: Security Advisory (SUSE-SU-2020:2972-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2083-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:2972-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : java-1.8.0-openjdk (CESA-2020:2972)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2972 advisory. - OpenJDK: Incorrect handling of access control context in ForkJoinPool Libraries, 8237117 CVE-2020-14556 - OpenJDK: HostnameChecker does not ensure...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2020-2972)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2972 advisory. 1:1.8.0.262.b10-0.1 - Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Fix...

CVE-2020-2972

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

CVE-2020-2972

CVE-2020-2972 relates to Oracle Database Server’s Oracle Application Express (APEX). Affected versions are 5.1–19.2. The vulnerability is exploitable by a low-privileged attacker who has the SQL Workshop privilege and network access via HTTP to compromise APEX. Successful exploits can lead to una...

CVE-2019-2972

CVE-2019-2972 affects Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware; the affected component/version is Outside In Filters 8.5.4. An unauthenticated attacker with network access via HTTP can compromise data: unauthorized update/insert/delete and read access, plus pa...

openSUSE Security Update : java-10-openjdk (openSUSE-2019-570)

This update for OpenJDK 10.0.2 fixes the following security issues : - CVE-2018-2940: the libraries sub-component contained an easily exploitable vulnerability that allowed attackers to compromise Java SE or Java SE Embedded over the network, potentially gaining unauthorized read access to data...

openSUSE Security Update : java-11-openjdk (openSUSE-2019-575)

This java-11-openjdk update to version jdk-11+24 fixes the following issues : Security issues fixed : - CVE-2018-2940: Fix unspecified vulnerability in subcomponent Libraries bsc1101645. - CVE-2018-2952: Fix unspecified vulnerability in subcomponent Concurrency bsc1101651. - CVE-2018-2972: Fix...