830 matches found
CVE-2020-2622: Undefined Security Weakness
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
PT-2020-1487
Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to the Event Management component of the Enterprise Manager Base Platform product, which is affected by a vulnerability related to insufficient...
Security Bulletin: Version 8.15.0 of Node.js included in IBM Cloud Event Management 2.3.0 has several security vulnerabilities.
Summary Security Bulletin: Version 8.15.0 of Node.js included in IBM Cloud Event Management 2.3.0 has several security vulnerabilities. Vulnerability Details CVE-ID: CVE-2019-9516 Description: Multiple vendors are vulnerable to a denial of service, caused by a 0-Length Headers Leak attack. By...
EyesOfNetwork 5.1 - Authenticated Remote Command Execution
EyesOfNetwork 5.1 - Authenticated Remote Command Execution Exploit Title: EyesOfNetwork 5.1 - Authenticated Remote Command Execution Google Dork: N/A Date: 2019-08-14 Exploit Author: Nassim Asrir Vendor Homepage: https://www.eyesofnetwork.com/ Software Link:...
The vulnerability of the Event Management Service daemon (emsd) on the Cisco IOS XR operating system allows a hacker to trigger a service failure.
The vulnerability of the Event Management Service daemon emsd on the Cisco IOS XR operating system is related to insufficient validation of input data during gRPC requests. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted gRPC requests...
Event Management Tickets Booking By Event Monster <= 1.0.5 - Stored XSS
The Event Management Tickets Booking By Event Monster WordPress plugin was affected by a Stored XSS security vulnerability...
WordPress Event Management Tickets Booking plugin <= 1.0.5 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability found by Admavidhya N in WordPress Event Management Tickets Booking plugin versions = 1.0.5. Solution Update the WordPress Event Management Tickets Booking plugin to the latest available version at least 1.0.6...
Cisco IOS XR gRPC Software Denial of Service Vulnerability
According to its self-reported version, Cisco IOS XR Software is affected by following vulnerability : - A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...
Design/Logic Flaw
A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...
Cisco IOS XR gRPC Software Denial of Service Vulnerability
A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...
School Event Management System SQL Injection Vulnerability
School Event Management System is a school event management system. A SQL injection vulnerability exists in School Event Management System version 1.0, which can be exploited by remote attackers to view, add, modify or delete information in the back-end database by sending the 'id' parameter to t...
CVE-2018-18795
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter...
CVE-2018-18794
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit...
CVE-2018-18793
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos...
CVE-2018-18793
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos...
CVE-2018-18794
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit...
CVE-2018-18795
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter...
Sql injection
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter...