3575 matches found
CVE-2022-26351
CVE-2022-26351 is a rejected/duplicate candidate and does not represent an active vulnerability entry; refer to CVE-2022-26320.
CVE-2022-24727
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-23915. Reason: This candidate is a reservation duplicate of CVE-2022-23915. Notes: All CVE users should reference CVE-2022-23915 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
WordPress Court Reservation – Manage Your Court Bookings Online plugin <= 1.6.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Court Reservation – Manage Your Court Bookings Online plugin versions = 1.6.0. Solution Update the WordPress Court Reservation – Manage Your Court Bookings Online plugin to the latest available version at least 1.6.1...
WordPress Court Reservation – Manage Your Court Bookings Online plugin <= 1.6.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Court Reservation – Manage Your Court Bookings Online plugin versions = 1.6.0. Solution Update the WordPress Court Reservation – Manage Your Court Bookings Online plugin to the latest available version...
GSD-2022-1000619 i40e: Fix queues reservation for XDP
i40e: Fix queues reservation for XDP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit 4b3aa858268b7b9aeef02e5f9c4cd8f8fac101c8,...
CVE-2017-1095
CVE-2017-1095 affects IBM Jazz Reporting Service’s Lifecycle Query Engine (LQE). The IBM Security Bulletin reports a cross-site scripting vulnerability in JRS, enabling a user to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Affected produ...
CVE-2019-4223
IBM OpenPages GRC Platform is affected by an information-disclosure vulnerability tracked as CVE-2019-4223. The issue affects IBM OpenPages GRC Platform version 8.0 and allows disclosure of detailed error messages in WebApplication and API responses. Remediation provided by IBM fixes are availabl...
CVE-2020-29754
CVE-2020-29754 is a privilege escalation vulnerability in IBM WebSphere Application Server shipped with IBM Security Identity Manager (ISIM). Affected ISIM versions: 6.0.0 and 6.0.2. Affected WAS versions: WAS 7.0 and 8.5 for ISIM 6.0.0; WAS 9 for ISIM 6.0.2. Remediation/fixes are listed in the b...
CVE-2021-427171
The connected CNNVD entry links CVE-2021-427171 to a vulnerability in ModSecurity used with NGINX, where the ModSecurity JSON parser can be triggered by specially formatted JSON messages, causing high resource utilization and a potential denial of service. Affected component: ModSecurity WAF inte...
CVE-2022-25019
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38602. Reason: This candidate is a reservation duplicate of CVE-2021-38602. Notes: All CVE users should reference CVE-2021-38602 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2022-25019
CVE-2022-25019 is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-6930
CVE-2020-6930 entry is linked to a concrete HP Sure Sense elevation of privilege issue (HP PSRT HPSBHF03711 rev. 3). HP identifies a potential vulnerability in Sure Sense that could allow elevation of privilege; HP has released mitigations via updates/SoftPaqs with minimum versions for affected p...
CVE-2016-1000238
The CVE-2016-1000238 entry is linked to node-krb5 SPOOFING via unvalidated KDC. Affected: node-krb5 (Node.js module). Issue: KDC is not validated before authentication, allowing a network-attacker with time and access to spoof the KDC and impersonate a valid user without credentials. Impact: pote...
GSD-2022-1000254 i40e: Fix queues reservation for XDP
i40e: Fix queues reservation for XDP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit 00eddb0e4ea115154581d1049507a996acfc2d3e...
GSD-2022-1000193 i40e: Fix queues reservation for XDP
i40e: Fix queues reservation for XDP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.96 by commit 768eb705e6381f0c70ca29d4e66f19790d5d19a1...
CVE-2021-3648
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3530. Reason: This candidate is a reservation duplicate of CVE-2021-3530. Notes: All CVE users should reference CVE-2021-3530 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...
Denial Of Service (DoS)
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
Denial Of Service (DoS)
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
Cross-site Scripting (XSS) - Reflected in effgarces/bookedscheduler
Setup the Booked Scheduler locally.URL like the following. http://192.168.5.5/phpsch/ Attcker 2. Login as valid user. 3. Make an reservation from the dashboard. 4. Open the information you reserved.URL like the following http://192.168.5.5/Web/reservation.php?rn=62020af2eee4d833634703 5. The...