58 matches found
CVE-2022-28734 affecting package grub2 for versions less than 2.06-14
CVE-2022-28734 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...
WordPress Login Lockdown Plugin <= 2.06 is vulnerable to SQL Injection
Software Login Lockdown Type Plugin Vulnerable versions = 2.06 Fixed in 2.07 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50837 Patch priority Low CVSS severity Low 7.6 Developer WebFactory Ltd. PSID 9ecc390faf23 Credits LVT-tholv2k Required privilege Administrator Publish...
CVE-2021-3695 affecting package grub2 for versions less than 2.06-12
CVE-2021-3695 affecting package grub2 for versions less than 2.06-12. A patched version of the package is available...
PT-2023-15227 · Generex · Generex Cs141
Name of the Vulnerable Software and Affected Versions: Generex CS141 versions prior to 2.06 Description: The issue is related to a file upload XSS vulnerability. The web application allows file uploading, which makes it possible to upload a file with HTML content. When HTML files are allowed, an...
AZL-34789 CVE-2022-28734 affecting package grub2 for versions less than 2.06-14
Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's...
CVE-2022-3775 affecting package grub2 for versions less than 2.06-10
CVE-2022-3775 affecting package grub2 for versions less than 2.06-10. A patched version of the package is available...
grub2 security update
2.06-46.0.4.el91.3 - Bump SBAT metadata for grub to 3 Orabug: 34872719 - Fix CVE-2022-3775 Orabug: 34871953 - Enable signing for aarch64 EFI - Fix signing certificate names - Enable back btrfs grub module for EFI pre-built image Orabug: 34360986 - Replaced bugzilla.oracle.com references Orabug:...
Generex UPS Adapter CS141 安全漏洞
Generex UPS Adapter CS141 is a UPS Uninterruptible Power System adapter from Generex. A security vulnerability exists in Generex UPS Adapter CS141 versions prior to 2.06 that allows an attacker to replace the administrator password by uploading a modified users.json file to a web server...
PT-2023-15228 · Generex · Generex Ups Cs141
Name of the Vulnerable Software and Affected Versions: Generex UPS CS141 versions prior to 2.06 Description: The issue allows an attacker to read arbitrary files, potentially leading to sensitive information disclosure. By utilizing default credentials, an attacker can upload a backup file that...
PT-2023-15230 · Generex · Generex Ups Cs141
Name of the Vulnerable Software and Affected Versions: Generex UPS CS141 versions prior to 2.06 Description: The issue allows a remote attacker to upload a firmware file containing a webshell, which could enable the execution of arbitrary code as root. Recommendations: For versions prior to 2.06,...
AZL-11604 CVE-2022-2601 affecting package grub2 for versions less than 2.06-8
A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may...
lesspipe: Arbitrary Code Exeecution
Background lesspipe is a preprocessor for less. Description lesspipe has support for parsing Perl storable "PST" files, Impact A crafted Perl storable file which is passed into lesspipe could result in arbitrary code execution. Workaround There is no known workaround at this time. Resolution All...
CVE-2021-3981 affecting package grub2 2.06~rc1-7
CVE-2021-3981 affecting package grub2 2.06rc1-7. A patched version of the package is available...
CVE-2021-20233 affecting package grub2 for versions less than 2.06~rc1-7
CVE-2021-20233 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...
CVE-2020-10713 affecting package grub2 for versions less than 2.06~rc1-7
CVE-2020-10713 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...
CVE-2021-3418 affecting package grub2 for versions less than 2.06~rc1-7
CVE-2021-3418 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...
CVE-2020-27779 affecting package grub2 for versions less than 2.06~rc1-7
CVE-2020-27779 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...
CVE-2020-14310 affecting package grub2 for versions less than 2.06~rc1-7
CVE-2020-14310 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...