114 matches found
Malicious code in wlwz-2312-5002 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9f2864dfcc1013f030565e450323b1d25d6b469ee9728fcfbdd84084f0e9e78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GLSA-202401-26 : Apache XML-RPC: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202401-26 Apache XML-RPC: Multiple Vulnerabilities - XML external entity XXE vulnerability in the Apache XML-RPC aka ws-xmlrpc library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forger...
Error event ID 5002 recorded on StoreFront server
When starting Citrix Workspace, the User Name and Password inputs are not displayed. Restarting StoreFront temporarily resolves the issue. The following error event log was recorded in the StoreFront Event Viewer. Event ID 5002, Application Pool Citrix Delivery Services Authentication has been...
Fedora 38 : pgadmin4 (2023-8cc61c8b14)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8cc61c8b14 advisory. Backport fix for CVE-2023-5002. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 37 : pgadmin4 (2023-478aa17fa2)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-478aa17fa2 advisory. Backport fix for CVE-2023-5002. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
CVE-2023-5002
creationtimestamp| type| source ---|---|--- 2023-09-22 18:31:52+00:00| seen| https://t.me/cibsecurity/70949...
CVE-2023-5002 Pgadmin4: remote code execution by an authenticated user
A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pgdump and pgrestore. Versions of pgAdmin prior to 7.6 failed to properly control the server code executed on this API, allowing an...
CVE-2023-5002
CVE-2023-5002 affects pgAdmin’s server HTTP API where path validation for external PostgreSQL utilities (e.g., pg_dump/pg_restore) was insufficient. An authenticated user could cause the server to execute arbitrary commands due to improper control of server-side code. Reports across multiple sour...
CVE-2023-5002 Pgadmin4: remote code execution by an authenticated user
A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pgdump and pgrestore. Versions of pgAdmin prior to 7.6 failed to properly control the server code executed on this API, allowing an...
CVE-2023-5002 Pgadmin4: remote code execution by an authenticated user
A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pgdump and pgrestore. Versions of pgAdmin prior to 7.6 failed to properly control the server code executed on this API, allowing an...
CVE-2020-5002
IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954...
CVE-2020-5002 IBM Financial Transaction Manager security bypass
IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954...
CVE-2020-5002
IBM Financial Transaction Manager (for Corporate, Digital, and High Value Payments) versions 3.2.0–3.2.10 are affected by CVE-2020-5002 due to improper validation, potentially allowing an authenticated user to perform unauthorized actions. The IBM security bulletin specifies the affected product ...
RHEL 8 : virt:av and virt-devel:av (RHSA-2022:5002)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5002 advisory. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Re...
CVE-2003-5002
creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:27+00:00| seen| https://t.me/cibsecurity/39676...
CVE-2003-5002
ISS BlackICE PC Protection is affected by a vulnerability in the Update Handler component that allows cleartext data transmission. Affected products are noted as no longer supported by the maintainer. Public documents describe this as a problematic issue without details on a fix. In practice, the...
Mageia: Security Advisory (MGASA-2018-0286)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-5002
CVE-2007-5002 entry is rejected/not used and does not represent an active vulnerability.
Ubuntu: Security Advisory (USN-5002-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...