103 matches found
CVE-2020-6119
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The byear parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2020-6119
OS4Ed openSIS 7.3 is affected by SQL injection in CheckDuplicateStudent.php (byear, and related params such as bday, bmonth, fn, mn, ln). The TALOS report TALOS-2020-1072 documents multiple SQL injections via building SQL with unsanitized inputs in CheckDuplicateStudent at lines 64–66, enabling a...
CVE-2020-6119
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The byear parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...
OS4Ed openSIS CheckDuplicateStudent.php page SQL injection vulnerability
Talos Vulnerability Report TALOS-2020-1072 OS4Ed openSIS CheckDuplicateStudent.php page SQL injection vulnerability August 31, 2020 CVE Number CVE-2020-6117,CVE-2020-6119,CVE-2020-6121,CVE-2020-6118,CVE-2020-6120,CVE-2020-6122 SUMMARY Multiple exploitable SQL injection vulnerabilities exist in th...
Fedora 29 : chromium (2018-39be36e9fc)
Security fixes for CVE-2018-6055 CVE-2018-6119 CVE-2018-16429 CVE-2018-16428 ---- Update to Chromium 69. EPEL-7 update is blocked by a GCC bug: 1629813, so as soon as devtoolset-8 arrives... Fixes a lot of security issues, like every major release of Chromium, including CVE-2018-16087...
Fedora 28 : chromium (2018-f76e6d17f1)
Security fixes for CVE-2018-6055 CVE-2018-6119 CVE-2018-16429 CVE-2018-16428 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2018-6119
Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2018-6119
Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2018-6119
CVE-2018-6119 affects Google Chrome prior to 64.0.3282.119, where an incorrect security UI in the Omnibox (URL bar) allowed a remote attacker to spoof the Omnibox content via a crafted HTML page. The vulnerability originates from the Omnibox security UI handling and is confirmed in connected sour...
CVE-2015-6119
This CVE entry is rejected/not used; the candidate number is not associated with any vulnerability.
CVE-2014-6119
IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive...
CVE-2014-6119
IBM Security AppScan Enterprise is affected by CVE-2014-6119. The vulnerability allows remote attackers to execute arbitrary code via a crafted executable file inside an archive. Affected versions are: 8.5 before 8.5 IFix 002; 8.6 before 8.6 IFix 004; 8.7 before 8.7 IFix 004; 8.8 before 8.8 iFix ...
CVE-2012-6119
CVE-2012-6119 concerns Candlepin before 0.7.24 used in Red Hat Subscription Asset Manager before 1.2.1, where manifest signatures were not properly checked, allowing local users to modify manifests. The related VERACODE entries confirm this and tie remediation to the Red Hat 1.2.1 update (RHSA-20...
CentOS 4 / 5 : wireshark (CESA-2008:0058)
Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously...
CVE-2008-3310
creationtimestamp| type| source ---|---|--- 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32111 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6119...
GLSA-200712-23 : Wireshark: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200712-23 Wireshark: Multiple vulnerabilities Multiple buffer overflows and infinite loops were discovered in multiple dissector and parser components, including those for MP3 and NCP CVE-2007-6111, PPP CVE-2007-6112, DNP...
Wireshark: Multiple vulnerabilities
Background Wireshark is a network protocol analyzer with a graphical front-end. Description Multiple buffer overflows and infinite loops were discovered in multiple dissector and parser components, including those for MP3 and NCP CVE-2007-6111, PPP CVE-2007-6112, DNP CVE-2007-6113, SSL and iSerie...
Fedora 7 : wireshark-0.99.7-1.fc7 (2007-4690)
upgrade to 0.99.7 fixes various security flaws. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 8 : wireshark-0.99.7-2.fc8 (2007-4590)
Various flaws fixed by upgrade to 0.99.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...