49 matches found
AlmaLinux 8 : kpatch-patch (ALSA-2022:7137)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:7137 advisory. - kernel: a use-after-free in clsroute filter implementation may lead to privilege escalation CVE-2022-2588 Note that Nessus has not tested for this issue but has...
CVE-2018-7137
This CVE entry is rejected/not used; it does not represent an active vulnerability entry.
CVE-2020-7137
A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue...
CVE-2020-7137
The CVE-2020-7137 issue affects HPE Superdome Flex Server’s RMC component. A validation flaw can lead to local elevation of privilege. Affected product: HPE Superdome Flex Server (RMC). Root cause: input/validation failure in RMC that allows escalation of privileges. Impact (as stated): local ele...
CVE-2019-7137
creationtimestamp| type| source ---|---|--- 2019-05-23 16:48:41+00:00| seen| https://t.me/cvemitreorg/212...
CVE-2019-7137
Adobe Bridge CC 9.0.2 is affected by a memory corruption vulnerability (CVE-2019-7137) that could lead to information disclosure. This CVE is discussed across multiple connected reports (Red Hat, NVD, Nessus) showing the issue relates to Adobe Bridge CC 9.0.2 and alongside other CVEs in the APSB1...
CVE-2019-7137
Adobe Bridge CC versions 9.0.2 have a memory corruption vulnerability. Successful exploitation could lead to information disclosure...
CVE-2017-7137
An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Mach-O file...
CVE-2017-7137
Apple Xcode before version 9 is affected by ld64 memory-handling issues that can be triggered by a crafted Mach-O file, potentially enabling arbitrary code execution or a denial of service. Connected sources confirm CVE-2017-7137 (and related CVEs) apply to the ld64 component within Xcode 9 era. ...
CVE-2015-7137
This CVE-2015-7137 entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-7137
Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to 1...
CVE-2016-7137
CVE-2016-7137 concerns multiple open redirects in Plone CMS versions 5.x (up to 5.0.6), 4.x (up to 4.3.11), and 3.3.x (up to 3.3.6). The vulnerability allows remote attackers to redirect users to arbitrary sites and facilitate phishing by supplying crafted URLs via (1) the referer parameter targe...
CVE-2016-7137
Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to 1...
CVE-2014-7137 - Multiple SQL Injections in Dolibarr ERP & CRM
Vulnerability title: Multiple SQL Injections in Dolibarr ERP & CRM CVE: CVE-2014-7137 Vendor: Dolibarr ERP & CRM Product: Dolibarr ERP & CRM Affected version: 3.5.3 Fixed version: 3.6.1 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an...
CVE-2014-7137
Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 contactid parameter in an addcontact action, 2 ligne parameter in a swapstatut action, or 3 projectref parameter to projet/tasks/contact.php; 4 line...
CVE-2014-7137
CVE-2014-7137 covers multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1. An authenticated user could exploit numerous parameters across modules (e.g., product/stock/fiche.php; projet/tasks/contact.php; compta/prelevement/liste.php; holiday/index.php; etc.) to execute arbitrar...
Dolibarr ERP And CRM 3.5.3 SQL Injection Vulnerability
Dolibarr ERP and CRM version 3.5.3 suffers from multiple remote SQL injection vulnerabilities. Vulnerability title: Multiple SQL Injections in Dolibarr ERP & CRM CVE: CVE-2014-7137 Vendor: Dolibarr ERP & CRM Product: Dolibarr ERP & CRM Affected version: 3.5.3 Fixed version: 3.6.1 Reported by: Jer...
CVE-2013-7137
CVE-2013-7137 affects Burden prior to 1.8.1. The vulnerability arises from insufficient validation of the burden_user_rememberme cookie, allowing remote unauthenticated users to set the cookie to 1 and gain administrative privileges via the login mechanism. Impact is authentication bypass with po...