Sql injection

Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, which might potentially trick an administrator into performing an unsafe action via escape sequence injection, or might have a data size that causes a denial of service to a bastio...

CVE-2017-20187 Magnesium-PHP Base.php formatEmailString injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3....

CVE-2017-20187

Magnesium-PHP prior to 0.3.1 is affected by CVE-2017-20187. The issue resides in the function formatEmailString in src/Magnesium/Message/Base.php, where manipulation of the arguments email/name leads to injection. A fix is available in version 0.3.1 (patch 500d340e1f6421007413cc08a8383475221c2604...

PT-2023-10638 · Unknown · Magnesium-Php

Name of the Vulnerable Software and Affected Versions: Magnesium-PHP versions up to 0.3.0 Description: A vulnerability was found in Magnesium-PHP, classified as problematic. The issue affects the formatEmailString function of the file src/Magnesium/Message/Base.php. The manipulation of the...

Security Bulletin: "Weak or Unsupported ciphers" vulnerability may affect IBM CICS TX Advanced 10.1

Summary "Weak or Unsupported ciphers" vulnerability may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2023-38361 DESCRIPTION: IBM CICS TX Advanced uses weaker than expected cryptographic algorithms that could all...

CVE-2023-31022

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service...

Improper restriction of XML external entity references (XXE) in Proself

Overview Proself provided by North Grid Corporation improperly restricts XML external entity references XXE CWE-611. The developer states that attacks exploiting this vulnerability have been observed. North Grid Corporation reported this vulnerability to JPCERT/CC to notify users of its solution...

Microsoft Windows Server 2012 Unsupported Version Detection

Microsoft Windows Server 2012 is running on the remote host. Microsoft ended support for Windows Server 2012 on October 10, 2023. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...

Microsoft Windows Server 2012 R2 Unsupported Version Detection

Microsoft Windows Server 2012 R2 is running on the remote host. Microsoft ended support for Windows Server 2012 R2 on October 10, 2023. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilitie...

CVE-2023-5322 D-Link DAR-7000 edit_manageadmin.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2023-5322

The CVE-2023-5322 entry concerns D-Link DAR-7000 firmware versions up to 20151231. The vulnerability is a SQL injection in the /sysmanage/edit_manageadmin.php functionality, caused by unsafely handling the id parameter. It can be exploited remotely, potentially compromising confidentiality, integ...

CVE-2023-5287

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in BEECMS 4.0. This affects an unknown part of the file /admin/admincontenttag.php?action=savecontent. The manipulation of the argument tag leads to cross site scripting. It is possible to initiate the attac...

CVE-2023-5287

CVE-2023-5287 affects BEECMS 4.0 with an injected tag parameter in /admin/admin_content_tag.php?action=save_content leading to cross-site scripting. The vulnerability is exploitable remotely and the exploit is publicly disclosed. Multiple sources confirm the issue exists in BEECMS 4.0 and note it...

CVE-2023-5287 BEECMS cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in BEECMS 4.0. This affects an unknown part of the file /admin/admincontenttag.php?action=savecontent. The manipulation of the argument tag leads to cross site scripting. It is possible to initiate the attac...

Atlassian JIRA SEoL (3.13.x <= x <= 3.14.x)

According to its version, Atlassian JIRA is between 3.13.x and 3.14.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

Tenable Nessus Agent SEoL (7.5.x)

According to its version, Tenable Nessus Agent is 7.5.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900...

Tenable Nessus SEoL (10.1.x)

According to its version, Tenable Nessus is 10.1.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Tenable Nessus Agent SEoL (7.3.x)

According to its version, Tenable Nessus Agent is 7.3.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900...

OpenSSL SEoL (3.0.x)

According to its version, OpenSSL is 3.0.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable,...

Tenable Nessus Agent SEoL (<= 6.10.x)

According to its version, Tenable Nessus Agent is less than or equal to 6.10.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security...