121 matches found
SUSE SLED15: curl / libcurl-devel / libcurl-devel-32bit / libcurl4 / etc (SUSE-SU-2024:3211-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3211-1 advisory. - CVE-2024-8096: OCSP stapling bypass with GnuTLS. bsc1230093 Tenable has extracted the preceding...
Oracle Linux 8 : traceroute (ELSA-2024-3211)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-3211 advisory. 3:2.1.0-8 - add gating.yaml 3:2.1.0-7 - fix improper command line parsing CVE-2023-46316 Tenable has extracted the preceding description block directly from the...
RHEL 8 : traceroute (RHSA-2024:3211)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3211 advisory. The traceroute utility displays the route used by IP packets on their way to a specified network or Internet host. Security Fixes: traceroute: improp...
CentOS 8 : traceroute (CESA-2024:3211)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2024:3211 advisory. - In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. CVE-2023-46316 Note that Nessus has not tested f...
WordPress WP EasyCart Plugin <= 5.6.3 is vulnerable to SQL Injection
Software WP EasyCart Type Plugin Vulnerable versions = 5.6.3 Fixed in 5.6.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-3211 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 68d2c07621df Credits Krzysztof Zając Required privilege Contributor Publish...
CVE-2024-3211 Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to SQL Injection via the 'productid' attribute of the ecaddtocart shortcode in all versions up to, and including, 5.6.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2023-3211
CVE-2023-3211 affects the WordPress Database Administrator plugin (versions ≤ 1.0.3). An unauthenticated AJAX action uses an unsanitized/uncescaped parameter in a SQL statement, enabling SQL injection with high impact (C/H/I/A). Public sources in the provided documents indicate the vulnerability ...
CVE-2023-3211
creationtimestamp| type| source ---|---|--- 2023-09-30 07:19:43+00:00| published-proof-of-concept| https://t.me/codeb0ss/1198 2024-01-16 17:27:21+00:00| seen| https://t.me/ctinow/168910 2024-01-22 23:16:39+00:00| seen| https://t.me/ctinow/171517...
WordPress WP Database Administrator Plugin <= 1.0.3 is vulnerable to SQL Injection
Software WP Database Administrator Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-3211 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 53fe9995f076 Credits Christiaan Swiers Required privilege...
SUSE CVE-2015-3211
php-fpm allows local users to write to or create arbitrary files via a symlink attack...
CVE-2022-3211
creationtimestamp| type| source ---|---|--- 2022-09-15 22:58:20+00:00| seen| https://t.me/cibsecurity/49826...
CVE-2022-3211 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.6...
CVE-2022-3211
Pimcore/pimcore prior to version 10.5.6 is affected by a stored Cross-site Scripting (XSS) vulnerability originating from how properties are added when creating or updating a user. The issue is described consistently across multiple sources (CVE-2022-3211, GHSA-4849-X3JX-45QR, OSV, and related ad...
Security update for log4j (important)
openSUSE Security Update: Security update for log4j Announcement ID: openSUSE-SU-2021:1601-1 Rating: important References: 1193743 Cross-References: CVE-2021-44228 CVE-2021-45046 CVSS scores: CVE-2021-44228 NVD : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-44228 SUSE: 9.8...
Cisco IOS XE Software Web UI Command Injection Vulnerability (cisco-sa-web-cmdinj4-S2TmH7GA)
According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...
CVE-2020-3211
A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker who has valid...
CVE-2020-3211
CVE-2020-3211 concerns Cisco IOS XE Software Web UI Command Injection. The connected Cisco advisory confirms an authenticated, remote attacker could exploit improper input sanitization in the Web UI to run arbitrary commands with root privileges on the device’s operating system. The impact is con...
CVE-2017-3211
CVE-2017-3211 involves Yopify, a customer-notification plugin, leaking PII (first name, last initial, city, and recent purchases) without user authorization. Connected docs confirm the root cause: the plugin loads a JSON blob containing user data via a site-specific API key, exposing data to any ...
CVE-2014-3211
CVE-2014-3211 affects Publify prior to 8.0.1, with a Denial of Service vulnerability. Remediation per PT-2020-7645 and Red Hat entries is to upgrade to version 8.0.1 or later; no exploit details are provided in the documents.