54 matches found
CVE-2020-6253
Under certain conditions, SAP Adaptive Server Enterprise Web Services, versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL...
CVE-2024-6253
A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /purchase.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2024-6253 itsourcecode Online Food Ordering System purchase.php sql injection
A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /purchase.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit...
Fortra Digital Guardian Agent Uninstaller Cross Site Scripting / UninstallKey Cached
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Uninstall Key Caching product: Fortra Digital Guardian Agent Uninstaller Data Loss Prevention vulnerable version: Agent: 7.9.4 fixed version: Agent: 7.9.4 CVE number:...
CVE-2023-6253 Saved Uninstall Key in Digital Guardian Agent Uninstaller
A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file...
CVE-2023-6253
CVE-2023-6253 affects Digital Guardian Agent prior to version 7.9.4, where an encryption/uninstall key is stored in the uninstaller. A local attacker can retrieve the uninstall key from memory of the uninstaller file and use it to remove the software. Affected component: Agent Uninstaller; root c...
Newly Patched SAP ASE Flaws Could Let Attackers Hack Database Servers
A new set of critical vulnerabilities uncovered in SAP's Sybase database software can grant unprivileged attackers complete control over a targeted database and even the underlying operating system in certain scenarios. The six flaws, disclosed by cybersecurity firm Trustwave today, reside in...
CVE-2020-6253
CVE-2020-6253 affects SAP Adaptive Server Enterprise Web Services (versions 15.7 and 16.0). The vulnerability arises from the WebServices handling code, enabling an authenticated user to craft database queries that elevate privileges, modify objects, or execute unauthorised commands, i.e., a SQL ...
CVE-2020-6253
Under certain conditions, SAP Adaptive Server Enterprise Web Services, versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL...
CVE-2015-6253
creationtimestamp| type| source ---|---|--- 2019-07-29 20:35:15+00:00| seen| https://t.me/cibsecurity/5778...
CVE-2015-6253
edx-platform before 2015-08-17 allows XSS in the Studio listing of courses...
CVE-2015-6253
edx-platform before 2015-08-17 allows XSS in the Studio listing of courses...
CVE-2015-6253
CVE-2015-6253 affects edx-platform prior to 2015-08-17 and enables Cross-Site Scripting in the Studio listing of courses. Exploitation details are not provided in the connected documents, and no remediation steps are specified here.
NVIDIA Linux GPU Display Driver Multiple Vulnerabilities
The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111107; scriptversion"1.5";...
Vulnerability Spotlight: Multiple Nvidia D3D10 Driver Pixel Shader Vulnerabilities
Discovered by Piotr Bania of Cisco Talos Overview Today, Cisco Talos is disclosing multiple vulnerabilities that exist within the Nvidia D3D10 driver. This driver is used throughout multiple GPU product lines available from Nvidia. This is a commonly used driver, and exploitation can even affect...
CVE-2017-6253
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the size of an input buffer is not validated which may lead to denial of service or potential escalation of privileges...
CVE-2017-6253
CVE-2017-6253 : NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler (nvlddmkm.sys) for DxgkDdiEscape where the size of the input buffer is not validated, which may lead to denial of service or potential elevation of privileges. The description provided does...
CVE-2017-6253
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the size of an input buffer is not validated which may lead to denial of service or potential escalation of privileges...