34 matches found
CVE-2025-5362
CVE-2025-5362 affects Campcodes Online Hospital Management System 1.0. The vulnerability is an SQL injection in the file /admin/doctor-specilization.php caused by manipulating the parameter doctorspecilization, exploitable remotely. Multiple sources confirm exploitation possibilities and public d...
CVE-2019-5362
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2024-5362
creationtimestamp| type| source ---|---|--- 2025-02-14 09:46:59+00:00| seen| Telegram/V7oS4K24Z11EkvJKGIzz2H3lXHCMrQVggkV6um7O8Kzfud...
CVE-2024-5362 SourceCodester Online Hospital Management System departmentDoctor.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Affected is an unknown function of the file departmentDoctor.php. The manipulation of the argument deptid leads to sql injection. It is possible to launch the attack remotely. The exploi...
WordPress Spice Post Slider Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software Spice Post Slider Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5362 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 963f12e8b291 Credits István Márton Required...
CVE-2023-5362 Carousel, Recent Post Slider and Banner Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Carousel, Recent Post Slider and Banner Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spicepostslider' shortcode in versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...
CVE-2023-5362
CVE-2023-5362 affects the WordPress plugin Spice Post Slider (Carousel, Recent Post Slider and Banner Slider). The vulnerability is a stored XSS via the spice_post_slider shortcode, caused by insufficient input sanitization and output escaping on user-supplied attributes. Affected versions are up...
Oracle Linux 8 : nodejs:18 (ELSA-2023-5362)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5362 advisory. - Rebase to version 18.17.1 Resolves: rhbz2228939 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 Tenable has extracted the preceding descriptio...
RHEL 8 : nodejs:18 (RHSA-2023:5362)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5362 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
Ubuntu: Security Advisory (USN-5362-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : Linux kernel (Intel IOTG) vulnerabilities (USN-5362-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5362-1 advisory. Nick Gregory discovered that the Linux kernel incorrectly handled network offload functionality. A local attacker could use this to cause a denial of...
CVE-2020-5362
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...
CVE-2012-5362
creationtimestamp| type| source ---|---|--- 2020-02-20 18:52:27+00:00| seen| https://t.me/cibsecurity/9975...
CVE-2012-5362
CVE-2012-5362 describes a DoS in the IPv6 stack of Microsoft Windows 7 and earlier caused by a flood of ICMPv6 Neighbor Solicitation messages. The CVE is tied to the Windows IPv6 ND implementation and allows remote attackers to exhaust CPU/resources, leading to potential system unavailability. Th...
CVE-2019-5362
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5362
HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09 is affected by CVE-2019-5362. The connected sources describe a TopoDebugServlet expression language injection in IMC that allows remote code execution. The vulnerability exists in the way serialized objects are handled by ...
CVE-2018-5362
The CVE-2018-5362 entry concerns the WPGlobus WordPress plugin (version 1.9.6) with a Stored XSS vulnerability: an attacker can inject script via the wpglobus_option[post_type][page] parameter sent to wp-admin/options.php. This is a cross-site scripting flaw in the plugin’s handling of option dat...
CVE-2014-5362
CVE-2014-5362 affects LANDESK/Landesk Management Suite 9.6 and earlier. The admin interface is vulnerable to remote file inclusion via insufficient input validation, exploitable by crafting requests that set the d parameter in ldms/sm_actionfrm.asp or remote/frm_coremainfrm.aspx, or the top param...
Low: Red Hat Security Advisory: openstack-neutron security and bug fix update
An update for openstack-neutron is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Low: Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update
An update for openstack-neutron is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...