718 matches found
[SECURITY] Fedora 40 Update: java-diff-utils-4.12-7.fc40
Diff Utils library is an OpenSource library for performing the comparison / d iff operations between texts or some kind of data: computing diffs, applying patches, genera ting unified diffs or parsing them, generating diff output for easy future displaying lik e side-by-side view and so on...
Important: virtuoso-opensource
Issue Overview: An issue in the boxdiv function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement. CVE-2023-48948 An issue in the boxadd function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of...
Amazon Linux 2 : virtuoso-opensource (ALAS-2024-2383)
The version of virtuoso-opensource installed on the remote host is prior to 7.2.11-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2383 advisory. An issue in the boxdiv function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of...
CVE-2024-0302
A vulnerability, which was classified as critical, has been found in fhs-opensource iparking 1.5.22.RELEASE. This issue affects some unknown processing of the file /vueLogin. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2024-0301
A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...
Deserialization of untrusted data
A vulnerability, which was classified as critical, has been found in fhs-opensource iparking 1.5.22.RELEASE. This issue affects some unknown processing of the file /vueLogin. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the...
Sql injection
A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...
CVE-2024-0302 fhs-opensource iparking vueLogin deserialization
A vulnerability, which was classified as critical, has been found in fhs-opensource iparking 1.5.22.RELEASE. This issue affects some unknown processing of the file /vueLogin. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2024-0302
CVE-2024-0302 affects fhs-opensource iparking 1.5.22.RELEASE. A deserialization flaw in the processing of the file /vueLogin allows remote exploitation; the exploit has been disclosed publicly. Remediation: PT-2024-15453 suggests restricting access to /vueLogin as a temporary workaround since no ...
CVE-2024-0302 fhs-opensource iparking vueLogin deserialization
A vulnerability, which was classified as critical, has been found in fhs-opensource iparking 1.5.22.RELEASE. This issue affects some unknown processing of the file /vueLogin. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2024-0301
CVE-2024-0301 affects fhs-opensource iparking 1.5.22.RELEASE. The flaw is in the Java method getData of src/main/java/com/xhb/pay/action/PayTempOrderAction.java, causing an SQL injection. The vulnerability enables remote initiation and the exploit has been disclosed publicly. Multiple sources (NV...
CVE-2024-0301 fhs-opensource iparking PayTempOrderAction.java getData sql injection
A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...
CVE-2024-0301 fhs-opensource iparking PayTempOrderAction.java getData sql injection
A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...
CVE-2023-48947
An issue in the chacmp function of openlink virtuoso-opensource allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-48946
An issue in the boxmpy function of openlink virtuoso-opensource allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-48948
An issue in the boxdiv function in openlink virtuoso-opensource allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-48949
An issue in the boxadd function in openlink virtuoso-opensource allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-48950
An issue in the boxcollen function in openlink virtuoso-opensource allows attackers to cause a Denial of Service DoS after running a SELECT statement...