61 matches found
MiracleLinux 7 : fontconfig-2.10.95-10.el7 (AXSA:2016-1121:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-1121:01 advisory. Fontconfig is designed to locate fonts within the system and select them according to requirements specified by applications. Security issues fixed with this...
CVE-2023-5384 vulnerabilities
Vulnerabilities for packages: infinispan...
CVE-2023-5384 vulnerabilities
Vulnerabilities for packages: infinispan...
CVE-2025-5384
A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack remotely. This product takes the...
CVE-2025-5384
A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack remotely. This product takes the...
CVE-2025-5384
The CVE-2025-5384 vulnerability affects JeeWMS up to version 20250504, targeting the CgAutoListController.do?datagrid function. It enables remote SQL injection due to the underlying vulnerability in CgAutoListController, with no disclosed affected/update release versions in the sources. A practic...
CVE-2025-5384 JeeWMS cgAutoListController.do CgAutoListController sql injection
A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack remotely. This product takes the...
CVE-2025-5384 JeeWMS cgAutoListController.do CgAutoListController sql injection
A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack remotely. This product takes the...
CVE-2019-5384
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
Linux Distros Unpatched Vulnerability : CVE-2016-5384
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and...
CVE-2024-5384
creationtimestamp| type| source ---|---|--- 2025-02-14 10:03:08+00:00| seen| Telegram/PumtoLv5DzWvg5demJ2gBwiVGKncDY-OEoR-GcC5h0afuLo...
CGA-5384-X55W-9FG9
Bulletin has no description...
RHEL 6 : fontconfig (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - fontconfig: Possible double free due to insufficiently validated cache files CVE-2016-5384 Note that Nessus has not...
CVE-2024-5384
A vulnerability classified as critical was found in SourceCodester Facebook News Feed Like 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to sql injection. The attack can be initiated remotely. VDB-266302 is the identifier assigned ...
CVE-2024-5384 SourceCodester Facebook News Feed Like index.php sql injection
A vulnerability classified as critical was found in SourceCodester Facebook News Feed Like 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to sql injection. The attack can be initiated remotely. VDB-266302 is the identifier assigned ...
CVE-2024-5384
SourceCodester Facebook News Feed Like 1.0 is affected by CVE-2024-5384 due to unsanitized manipulation of the page parameter in index.php, enabling SQL injection. The issue can be exploited remotely over network with no authentication. Exploitation details beyond this are not provided in the con...
CVE-2024-5384 SourceCodester Facebook News Feed Like index.php sql injection
A vulnerability classified as critical was found in SourceCodester Facebook News Feed Like 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to sql injection. The attack can be initiated remotely. VDB-266302 is the identifier assigned ...
RHEL 6 : fontconfig (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - fontconfig: Possible double free due to insufficiently validated cache files CVE-2016-5384 Note that Nessus has not...
io.quarkus:quarkus-test-infinispan-client (>=2.5.0.CR1 <=3.0.0.Alpha2), org.infinispan:infinispan-cachestore-jdbc (>=13.0.0.CR1 <=14.0.24.Final) +16 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (>=13.0.0.CR1 <=14.0.24.Final)
org.infinispan:infinispan-cachestore-jdbc-common MAVEN version =13.0.0.CR1, =2.5.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =14.0.10.Final, =13.0.0.CR1, =14.0.24.Final and more...
io.quarkus:quarkus-test-infinispan-client (>=2.5.0.CR1 <=3.0.0.Alpha2), org.infinispan:infinispan-distribution (>=13.0.0.Final <=14.0.24.Final) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (>=13.0.0.CR2 <=14.0.24.Final)
org.infinispan:infinispan-cachestore-sql MAVEN version =13.0.0.CR2, =2.5.0.CR1, =13.0.0.Final, =13.0.0.Final, =13.0.0.CR2, =13.0.0.CR2, =13.0.0.CR2, =13.0.0.CR2, =13.0.0.CR2, =13.0.0.CR2, =14.0.10.Final, =13.0.0.CR2, =14.0.24.Final Source cves: CVE-2023-5384 Source advisory: OSV:GHSA-GG57-587F-H5...