CVE-2020-6191

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...

CVE-2024-6191 itsourcecode Student Management System Login Page login.php sql injection

A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-6191

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Egehan Security WebPDKS allows SQL Injection. This issue affects WebPDKS: through 20240329. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2023-6191 SQLi in WebPDKS

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Egehan Security WebPDKS allows SQL Injection. This issue affects WebPDKS: through 20240329. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2023-6191 SQLi in WebPDKS

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Egehan Security WebPDKS allows SQL Injection. This issue affects WebPDKS: through 20240329. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2023-6191

CVE-2023-6191 involves an SQL injection in Egehan Security WebPDKS, caused by improper neutralization of specific elements in SQL commands. Affected product is WebPDKS (through 20240329). Core impact is high across confidentiality, integrity, and availability; CVSSv3.1 vector indicates remote acc...

AlmaLinux 9 : thunderbird (ALSA-2023:6191)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:6191 advisory. - VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. CVE-2023-44488 - It was possible for certain browser prompts and...

Oracle Linux 9 : thunderbird (ELSA-2023-6191)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-6191 advisory. 115.4.1-1.0.1 - Update to 115.4.1 build1 - Add fix for CVE-2023-44488 Tenable has extracted the preceding description block directly from the Oracle...

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel regression (USN-6191-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6191-1 advisory. USN-6081-1, USN-6084-1, USN-6092-1 and USN-6095-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a spurious warning ...

Ubuntu: Security Advisory (USN-6191-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6191

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...

CVE-2020-6191

CVE-2020-6191 describes a vulnerability in SAP Landscape Management 3.0 where an attacker with admin privileges can cause the SAP Host Agent to execute arbitrary code with root privileges due to Missing Input Validation. The connected sources (NVD, Red Hat, CNVD, CNVD-like entries, and related no...

CVE-2019-6191

CVE-2019-6191 affects LenovoPaper software (discontinued) version 1.0.0.22 and is a local privilege-escalation vulnerability. The Lenovo advisory LEN-29187 confirms potential Local Privilege Escalation with medium severity and recommends uninstalling LenovoPaper as Lenovo has discontinued support...

Lenovo LenovoPaper CVE-2019-6191 Unspecified Local Privilege Escalation Vulnerability

Description Lenovo LenovoPaper software is prone to an unspecified local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges. Technologies Affected Lenovo LenovoPaper Recommendations Permit local access for trusted individuals only. Where possibl...

LenovoPaper Discontinuation - US

Lenovo Security Advisory: LEN-29187 Potential Impact: Local Privilege Escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6191 Summary Description: A potential vulnerability reported in the discontinued LenovoPaper software may allow local privilege escalation...

Security Bulletin: IBM Cúram Social Program Management is vulnerable to cross site scripting attack(CVE-2014-6191).

Summary IBM Cúram Social Program Management is vulnerable to cross site scripting attack caused by improper validation and sanitization of user-supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute script in a victim's Web browser within the...

Fedora 27 : mujs (2018-5b2e981f14)

Security fix for CVE-2018-5759. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Artifex MuJS 1.0.2 - Denial of Service Exploit

Exploit for multiple platform in category dos / poc The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. Exploit Title: Integer signedness error leading to Out-of-bounds read that causes crash Date: 2018-01-24 Exploit...

Artifex MuJS 1.0.2 - Denial of Service

Hello, I want to submit the following bug: The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. Exploit Title: Integer signedness error leading to Out-of-bounds read that causes crash Date: 2018-01-24 Exploit Author:...

Artifex MuJS 1.0.2 - Denial of Service

Artifex MuJS 1.0.2 - Denial of Service Hello, I want to submit the following bug: The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. Exploit Title: Integer signedness error leading to Out-of-bounds read that causes cra...