38615 matches found
CVE-2016-15019 tombh jekbox server.rb exposure of information through directory listing
A vulnerability was found in tombh jekbox. It has been rated as problematic. This issue affects some unknown processing of the file lib/server.rb. The manipulation leads to exposure of information through directory listing. The attack may be initiated remotely. The patch is named...
CVE-2016-15019
The connected PT-2023-10338 entry confirms a vulnerability in the tombh jekbox processing of the file lib/server.rb that exposes information through directory listing. This is a remote attack scenario. A patch is available: 64eb2677671018fc08b96718b81e3dbc83693190; applying it is recommended to f...
CVE-2016-15018
Krail-jpa contains a SQL injection flaw in versions up to 0.9.1 (affecting an unknown part). The issue is solved by upgrading to 0.9.2. Patch identifier: c1e848665492e21ef6cc9be443205e36b9a1f6be. Other references (VDB-218373) are noted in the vulnerability records.
U.S. Dept Of Defense: Reflected XSS at ████████
A reflected cross-site scripting XSS vulnerability was discovered in the dochelper feature of a certain domain. An attacker could inject a crafted script into the userId parameter, which would execute when the victim user accessed the page, potentially allowing the attacker to steal the victim's...
Security Bulletin: A vulnerability with GNU wget affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2016-4971)
Summary A vulnerability with GNU wget affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data CVE-2016-4971. Please see below for details on how to remediate this issue. Vulnerability Details CVEID:CVE-2016-4971 DESCRIPTION: GNU wget could allow a remote attacker to traverse...
Huawei EulerOS: Security Advisory for deltarpm (EulerOS-SA-2023-1217)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for mariadb-connector-c (EulerOS-SA-2023-1197)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for mariadb-connector-c (EulerOS-SA-2023-1227)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.0 : mariadb-connector-c (EulerOS-SA-2023-1227)
According to the versions of the mariadb-connector-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...
EulerOS Virtualization 2.9.1 : mariadb-connector-c (EulerOS-SA-2023-1197)
According to the versions of the mariadb-connector-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1063)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-15016
CVE-2016-15016 affects the Joomla plugin joomla_mod_einsatz_stats (versions up to 0.2). The vulnerability is in the helper.php function getStatsByType, where manipulating the year parameter leads to SQL injection. A fix is available in version 0.3, with the patch identified as 27c1b443cff45c81d9d...
CVE-2016-15015
CVE-2016-15015 affects viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. The vulnerability is in verify (src/Webhook.php) and exposes observable timing discrepancy, enabling potential information disclosure. Exploitation details are not provided beyond timing differences; attack complexity...
CVE-2016-15013
creationtimestamp| type| source ---|---|--- 2023-01-08 06:12:01+00:00| seen| https://t.me/cibsecurity/56118...
CVE-2016-15014
Summary: CVE-2016-15014 affects the CESNET theme-cesnet for ownCloud up to version 1.x. The issue concerns an unknown function in cesnet/core/lostpassword/templates/resetpassword.php that results in insufficiently protected credentials. Exploitation is described as local-only. The recommended fix...
CVE-2016-15013 ForumHulp searchresults listener.php list_keywords sql injection
A vulnerability was found in ForumHulp searchresults. It has been rated as critical. Affected by this issue is the function listkeywords of the file event/listener.php. The manipulation of the argument word leads to sql injection. The name of the patch is dd8a312bb285ad9735a8e1da58e9e955837b7322...
CVE-2016-15013
CVE-2016-15013 affects ForumHulp searchresults, specifically the list_keywords function in event/listener.php. The vulnerability arises from accepting and manipulating the word parameter, enabling SQL injection. A patch is identified by the commit hash dd8a312bb285ad9735a8e1da58e9e955837b7322, an...
CVE-2016-15012
CVE-2016-15012 affects SalesforceMobileSDK-Windows up to version 4.x. The vulnerability lies in the function ComputeCountSql within SalesforceSDK/SmartStore/Store/QuerySpec.cs, allowing SQL injection. Upgrading to version 5.0.0 addresses the issue (patch 83b3e91e0c1e84873a6d3ca3c5887eb5b4f5a3d8)....
CVE-2016-15012 forcedotcom SalesforceMobileSDK-Windows QuerySpec.cs ComputeCountSql sql injection
UNSUPPORTED WHEN ASSIGNED A vulnerability was found in forcedotcom SalesforceMobileSDK-Windows up to 4.x. It has been rated as critical. This issue affects the function ComputeCountSql of the file SalesforceSDK/SmartStore/Store/QuerySpec.cs. The manipulation leads to sql injection. Upgrading to...