70 matches found
CVE-2022-4812 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4812 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4812
CVE-2022-4812 affects the open-source memos project (usememos/memos) prior to v0.9.1, where a user-controlled key enables an authorization bypass. Several connected records corroborate an impact described as unauthorized access that can result in deletion of user resources (IDOR-like behavior), i...
CVE-2022-4812 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
Ubuntu: Security Advisory (USN-362-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4812-1 : xen - security update
Multiple vulnerabilities have been discovered in the Xen hypervisor : Several security issues affecting Xenstore could result in cross domain access denial of service, information leaks or privilege escalation or denial of service against xenstored. Additional vulnerabilities could result in...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4812)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4812 advisory. - loopback: off by one in tcmloopmakenaatpg Dan Carpenter Orabug: 30254296 CVE-2011-5327 Tenable has extracted the preceding description block...
CVE-2017-4812
CVE-2017-4812 entry rejected/not used; does not represent an active vulnerability entry.
CVE-2012-4812
CVE-2012-4812 is rejected and does not represent an active vulnerability entry.
CVE-2016-4812
Cross-site scripting XSS vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4812
The CVE-2016-4812 has concrete details: the WordPress plugin Markdown on Save Improved is affected by a stored XSS vulnerability in versions up to 2.5.1, allowing remote attackers to run arbitrary scripts via unspecified vectors. Exploitation is documented in multiple sources (NVD, JVN, CVE lists...
CVE-2015-4812
Oracle Fusion Middleware 11.1.1.9 includes Oracle HTTP Server; the issue (CVE-2015-4812) is in the OSSL Module subcomponent and can allow a remote attacker to read data, affecting confidentiality. Public docs tie this CVE to the OSSL Module in Oracle HTTP Server and note the vulnerability is expl...
CVE-2014-4812
CVE-2014-4812 (IBM Security AppScan Source 8.x–9.0.1) : The installer exposes an open network port for a debug service, enabling remote attackers to obtain sensitive information by connecting to that port. The primary affected component is the installer for IBM Security AppScan Source; the underl...
HP ProCurve Manager SNAC UpdateCertificatesServlet File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
openSUSE Security Update : opie (openSUSE-SU-2011:0848-1)
This update fixes off-by-one errors in opiesu CVE-2011-2489 and missing setuid return value checks in opielogin CVE-2011-2490. This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local : /usr/bin/opiesu...
[security bulletin] HPSBPV02918 rev.2 - HP ProCurve Manager (PCM), HP PCM+ and HP Identity Driven Manager (IDM), SQL Injection, Remote Code Execution, Session Reuse
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03897409 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03897409 Version: 2 HPSBPV02918 rev....
