86 matches found
CVE-2023-3208 RoadFlow Visual Process Engine .NET Core Mvc Login sql injection
A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...
CVE-2023-3208
CVE-2023-3208 affects RoadFlow Visual Process Engine .NET Core MVC 2.13.3. The issue is in the Login component, where manipulation of the sidx/sord arguments in the endpoint "/Log/Query?appid=..." leads to a SQL injection. The vulnerability is exploitable remotely, and public exploits have been d...
SUSE CVE-2012-3208
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability, related to Kernel/RCTL...
CVE-2022-3208
creationtimestamp| type| source ---|---|--- 2022-10-11 00:25:28+00:00| seen| https://t.me/cibsecurity/51084...
CVE-2022-3208
The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack...
CVE-2022-3208
The CVE-2022-3208 issue affects the WordPress Simple File List plugin, specifically versions prior to 4.4.12 (and discussed in related advisories as 4.4.12 and earlier). The root cause is missing nonce checks, enabling a CSRF attack where a logged-in administrator could have a forged request crea...
CVE-2022-3208 Simple File List < 4.4.13 - Page Creation via CSRF
The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack...
Security update for log4j (important)
openSUSE Security Update: Security update for log4j Announcement ID: openSUSE-SU-2021:1601-1 Rating: important References: 1193743 Cross-References: CVE-2021-44228 CVE-2021-45046 CVSS scores: CVE-2021-44228 NVD : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-44228 SUSE: 9.8...
SUSE: Security Advisory (SUSE-SU-2016:3208-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-3208
Cisco IOS Software for Cisco 809 and 829 Industrial ISRs is affected by an image verification bypass. The issue stems from insufficient access restrictions around the image verification code, allowing an authenticated attacker with valid credentials at privilege level 15 to log into the VDS and d...
CVE-2014-3208
A Denial of Service vulnerability exists in askpop3d 0.7.7 in free pszQuery,...
CVE-2014-3208
A Denial of Service vulnerability exists in askpop3d 0.7.7 in free pszQuery,...
CVE-2014-3208
CVE-2014-3208 affects askpop3d 0.7.7 (free build) and is described as a denial-of-service condition triggered through the pszQuery input. The linked sources confirm a DoS impact with partial availability impact per CVSS v2 and high availability impact per CVSS v3, but no concrete exploitation det...
CVE-2018-3208
Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and Security. The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Da...
CVE-2018-3208
Summary: CVE-2018-3208 affects the Oracle Hyperion Data Relationship Management component, specifically the Access and Security subcomponent, in version 11.1.2.4.345. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP, potentially leading to unauthorized ...
CVE-2017-3208
The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references XXEs from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server,...
CVE-2015-3208
CVE-2015-3208 is described in connected documents as an XXE/SSRF vulnerability in the XPath selector component of HornetQ within Apache ActiveMQ Artemis. The issue affects the XPath selector logic and can lead to information exposure via XML External Entity handling. Public references in Red Hat ...
CVE-2016-3208
This CVE entry is rejected; it is not associated with any vulnerability.
AMF3 Java implementations Improper Restriction of XML External Entity Reference ('XXE')
A detailed analysis of the reference: https://codewhitesec.blogspot.kr/2017/04/amf.html Some Java implementations of AMF3 deserializers allow the external entity references XXEs from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose...