5 matches found
HP Integrated Lights-Out HTML Injection (CVE-2013-4842)
Cross-site scripting XSS vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Linux Distros Unpatched Vulnerability : CVE-2021-30157
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and...
CVE-2024-23091
HotelDruid before 1.32 uses MD5 for password hashing in funzioni.php, allowing an attacker to obtain plaintext passwords from hashes. This is the concrete vulnerability described in CVE-2024-23091 and is reflected across multiple feeds (NVD, Red Hat, Debian, Ubuntu, OSV, etc.). The CVSSv3.1 base ...
pearweb 代码问题漏洞
pearweb is a PHP extension and application repository. A security vulnerability exists in pearweb before 1.32, which stems from deserialization of untrusted data...
DEBIAN-CVE-2019-9923
paxdecodeheader in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers...