Lucene search
+L

3113 matches found

Github Security Blog
Github Security Blog
•added 2022/12/02 10:26 p.m.•31 views

phpxmlrpc vulnerable to argument injection

phpxmlrpc vulnerable to argument injection via local file access in Client:send via manipulation of $protocol argument...

3.5AI score
SaveExploits0References4Affected Software1
osv-ghsa
osv-ghsa
•added 2022/12/02 10:26 p.m.•25 views

GHSA-Q7QQ-9GX2-GGXV phpxmlrpc vulnerable to argument injection

phpxmlrpc vulnerable to argument injection via local file access in Client:send via manipulation of $protocol argument...

7.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/12/02 12:00 a.m.•14 views

PT-2022-28271 · Phpxmlrpc · Phpxmlrpc

Name of the Vulnerable Software and Affected Versions: phpxmlrpc affected versions not specified Description: The issue concerns argument injection via local file access in the Client:send function. This is achieved through manipulation of the $protocol argument. Recommendations: At the moment,...

7.1AI score
SaveExploits0References5
NVD
NVD
•added 2022/12/01 3:15 p.m.•41 views

CVE-2022-4257

A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argument injection. The attack may be...

9.8CVSS0.4393EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/12/01 12:00 a.m.•455 views

CVE-2022-4257

A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argument injection. The attack may be...

9.8CVSS1.9AI score0.4393EPSS
SaveIn wildExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/01 12:00 a.m.•9 views

CVE-2022-4257: Improper Neutralization

A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argument injection. The attack may be...

9.8CVSS5.4AI score0.4393EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/12/01 12:00 a.m.•28 views

PT-2022-26501 · Unknown · C-Data Web Management System

Name of the Vulnerable Software and Affected Versions: C-DATA Web Management System affected versions not specified Description: A critical issue affects the C-DATA Web Management System, specifically the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the...

9.8CVSS9.5AI score0.4393EPSS
SaveExploits1References6
CVE
CVE
•added 2022/12/01 12:00 a.m.•236 views

CVE-2022-4257

C-DATA Web Management System contains a vulnerability in the GET Parameter Handler’s cgi-bin/jumpto.php where manipulating the hostname argument leads to argument injection. The issue can be exploited remotely and an exploit has been disclosed publicly. Affected component/file: cgi-bin/jumpto.php...

9.8CVSS7.9AI score0.4393EPSS
SaveIn wildExploits1References2Affected Software1
osv-oesa
osv-oesa
•added 2022/11/18 11:05 a.m.•11 views

OESA-2022-2105 xfce4-settings security update

This package includes the settings manager applications for the Xfce desktop. Security Fixes: In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.CVE-2022-45062...

9.8CVSS7.4AI score0.01528EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2022/11/16 3:09 p.m.•10 views

ruby-git: package vulnerable to Command Injection via git argument injection

A flaw was found in ruby-git, where the package is vulnerable to command injection via the git argument. This flaw allows an attacker to set additional flags, which leads to performing command injections...

9.8CVSS7.8AI score0.04912EPSS
SaveExploits1References5
Prion
Prion
•added 2022/11/13 8:15 a.m.•27 views

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...

4.3CVSS8AI score0.00233EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/13 12:00 a.m.•19 views

PT-2022-24985 · Unknown · Vesta Control Panel

Name of the Vulnerable Software and Affected Versions: Vesta Control Panel affected versions not specified Description: A critical issue was found in the sed Handler component of Vesta Control Panel, affecting an unknown function of the file func/main.sh. This issue leads to argument injection an...

7.8CVSS7.5AI score0.00233EPSS
SaveExploits0References6
Mend
Mend
•added 2022/11/13 12:00 a.m.•6 views

CVE-2022-3967

A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...

7.8CVSS0.00233EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/11/13 12:00 a.m.•38 views

CVE-2022-3967 Vesta Control Panel sed main.sh argument injection

A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...

5.3CVSS8.2AI score0.00233EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/11/13 12:00 a.m.•15 views

CVE-2022-3967 Vesta Control Panel sed main.sh argument injection

A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...

5.3CVSS6.7AI score0.00233EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/13 12:00 a.m.•5 views

CVE-2022-3967: Improper Neutralization

A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...

7.8CVSS5.1AI score0.00233EPSS
SaveExploits0References2
osv-cve
osv-cve
•added 2022/11/13 12:00 a.m.•21 views

CVE-2022-3967 Vesta Control Panel sed main.sh argument injection

A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...

5.3CVSS6.3AI score
SaveExploits0References4
CVE
CVE
•added 2022/11/13 12:00 a.m.•69 views

CVE-2022-3967

CVE-2022-3967 affects Vesta Control Panel, specifically the sed Handler component in func/main.sh. The vulnerability enables argument injection and requires local access to exploit. Patch 39561c32c12cabe563de48cc96eccb9e2c655e25 is identified as the fix; apply it to mitigate. Other details in con...

7.8CVSS6.3AI score0.00233EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2022/11/10 12:00 a.m.•15 views

Slackware: Security Advisory (SSA:2022-313-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01528EPSS
SaveExploits0References3
Slackware Linux
Slackware Linux
•added 2022/11/09 9:21 p.m.•33 views

[slackware-security] xfce4-settings

New xfce4-settings packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xfce4-settings-4.16.4-i586-1slack15.0.txz: Upgraded. Fixed an argument injection vulnerability in xfce4-mime-helper. For more...

9.8CVSS0.5AI score0.01528EPSS
SaveExploits0
Rows per page
Query Builder