CVE-2024-3300 Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution...

RHEL 7 : rh-php71-php (RHSA-2019:3300)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3300 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: underflow in envpathinfo in fpmmain.c...

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to information disclosure due to OWASP ESAPI (CVE-2010-3300)

Summary IBM Sterling B2B Integrator uses OWASP ESAPI. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2010-3300 DESCRIPTION: OWASP ESAPI for Java could allow a remote attacker to obtain sensitive information, caused by a padding oracle...

Malicious code in wlwz-2312-3300 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8927640fd4dd5bc8bbdc7a9eaeb83063a89dbc9deef898076047238a6a66457e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-467 Malicious code in wlwz-2312-3300 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8927640fd4dd5bc8bbdc7a9eaeb83063a89dbc9deef898076047238a6a66457e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2018-3300

creationtimestamp| type| source ---|---|--- 2024-01-15 12:37:17+00:00| seen| https://t.me/ctinow/168315...

GHSA-V5FM-HR72-27HX Nomad Search API Leaks Information About CSI Plugins

A vulnerability was identified in Nomad such that the search HTTP API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. This vulnerability, CVE-2023-3300, affects Nomad since 0.11 and was fixed in 1.6.0, 1.5.7, and 1.4.11...

Nomad Search API Leaks Information About CSI Plugins

A vulnerability was identified in Nomad such that the search HTTP API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. This vulnerability, CVE-2023-3300, affects Nomad since 0.11 and was fixed in 1.6.0, 1.5.7, and 1.4.11...

CVE-2023-3300

HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1...

CVE-2023-3300

HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1...

CVE-2023-3300

Removed by vendor...

CVE-2023-3300 Nomad Search API Leaks Information About CSI Plugins

HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1...

CVE-2023-3300

HashiCorp Nomad and Nomad Enterprise expose a vulnerability (CVE-2023-3300) where the HTTP search API can reveal names of available CSI plugins to unauthenticated users or those without the plugin:read policy. Affected versions are Nomad/Nomad Enterprise 0.11.0 through 1.5.6 and 1.4.1. The issue ...

CVE-2023-3300 Nomad Search API Leaks Information About CSI Plugins

HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1...

CVE-2022-3300 Form Maker by 10Web < 1.15.6 - Admin+ SQLI

The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2022-3300

CVE-2022-3300 affects the WordPress plugin “Form Maker by 10Web” prior to version 1.15.6. The root cause is improper sanitization/escaping of a parameter before it is used in a SQL statement, resulting in a SQL injection. Impact is described as exploitable by high-privilege users such as admins, ...

CVE-2022-3300 Form Maker by 10Web < 1.15.6 - Admin+ SQLI

The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

com.sun.jersey.contribs:jersey-lift (>=1.1.1-ea <=1.1.5-ea-v20091019), com.sun.jersey.contribs:jersey-lift-test (>=1.1.1-ea <=1.1.5-ea-v20091019) +29 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (>=2.0 <=2.0-RC2)

net.liftweb:lift-webkit MAVEN version =2.0, =1.1.1-ea, =1.1.1-ea, =2.0-M1, =2.0, =2.0, =2.0-RC2 - net.liftweb:lift-flot-demo =2.0-M4 - net.liftweb:lift-hellofbc =2.0-M4 and more Source cves: CVE-2013-3300 Source advisory: OSV:GHSA-JF9V-FXFQ-WM76...

com.fmpwizard:lift-named-comet_2.9.1 (=0.3), com.foursquare:rogue-lift_2.9.1 (>=2.0.0 <=3.0.0-beta15) +25 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.9.1 (>=2.4 <=2.4-RC1)

net.liftweb:lift-webkit2.9.1 MAVEN version =2.4, =2.0.0, =2.0.0, =1.0.24, =2.5, =2.5, =0.0.3, =0.0.3, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4-RC1 and more Source cves: CVE-2013-3300 Source advisory: OSV:GHSA-JF9V-FXFQ-WM76...

com.fmpwizard:lift-named-comet_2.9.0-1 (=0.3), com.foursquare:rogue-lift_2.9.0-1 (>=2.0.0 <=2.3.0) +21 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.9.0-1 (>=2.4 <=2.4-RC1)

net.liftweb:lift-webkit2.9.0-1 MAVEN version =2.4, =2.0.0, =1.0.14, =0.0.3, =0.0.3, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4-RC1 and more Source cves: CVE-2013-3300 Source advisory: OSV:GHSA-JF9V-FXFQ-WM76...