161 matches found
CVE-2023-3368
Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960...
CVE-2023-3368 Chamilo LMS Unauthenticated Command Injection
Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960...
CVE-2023-3368 Chamilo LMS Unauthenticated Command Injection
Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960...
CVE-2023-3368 Chamilo LMS Unauthenticated Command Injection
Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960...
CVE-2023-3368
CVE-2023-3368 corresponds to an unauthenticated command injection in Chamilo LMS, exploited via the endpoint /main/webservices/additional_webservices.php. The public details state that Chamilo LMS
CVE-2023-3368: Improper Neutralization of Special Elements used in an OS Command
Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960...
Debian: Security Advisory (DLA-3368-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2010-3368
unknown...
Exploit for Incorrect Default Permissions in Avira Avira_Security
CVE-2022-3368 PoC for arbitrary file move vulnerability in So...
CVE-2022-3368
creationtimestamp| type| source ---|---|--- 2022-10-18 00:13:25+00:00| seen| https://t.me/cibsecurity/51633 2022-10-18 12:33:54+00:00| seen| https://t.me/proxybar/1078 2022-10-19 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7007 2022-10-25 13:16:05+00:00|...
CVE-2022-3368
A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556...
CVE-2022-3368 Software Updater of Avira Security for Windows vulnerable to Privilege Escalation
A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556...
CVE-2022-3368
CVE-2022-3368 affects Avira Security for Windows, specifically the Software Updater component. A write-access path issue allows an attacker to escalate privileges in certain scenarios by abusing how downloaded files are stored during updates. The vulnerability was fixed in Avira Security version ...
SUSE SLES15 Security Update : kernel (Live Patch 14 for SLE 15 SP3) (SUSE-SU-2022:3368-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3368-1 advisory. This update for the Linux Kernel 5.3.18-1503005949 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a ra...
Mageia: Security Advisory (MGASA-2017-0325)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:0830-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:0469-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2021-3368 · Microsoft · Paint 3D
Name of the Vulnerable Software and Affected Versions: Paint 3D affected versions not specified Description: The issue is related to an out-of-bounds buffer operation in memory when parsing GLB and STL files, which can be exploited by an attacker to execute arbitrary code using a specially crafte...
CVE-2020-3368
The CVE affects Cisco AsyncOS on the Cisco Email Security Appliance (ESA), where an input-validation weakness allows an unauthenticated, remote attacker to bypass URL reputation filters by crafting a URL. The root cause is insufficient URL input validation. Impact is bypass of URL filtering, enab...