Vuldb Updates

A vulnerability classified as problematic has been found in Rediker AdminPlus 6.1.91.00. Affected is the function onload. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2023-24744. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Microbin 1.2.0. Affected by this vulnerability is an unknown functionality of the file microbin/src/pasta.rs. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2023-27075. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, has been found in Genomedics MilleGP5 5.9.2. This issue affects some unknown processing of the component File Handler. The manipulation leads to incorrect permission assignment. The identification of this vulnerability is CVE-2023-25438. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in BackWPup 1.7.1 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file wp_xml_export.php. The manipulation of the argument wpabs leads to code injection. This vulnerability is known as CVE-2011-4342. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple Safari up to 11.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component WebKit. The manipulation leads to race condition. This vulnerability is handled as CVE-2018-4192. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Myrephp MYRE Real Estate Software 2012. This vulnerability affects unknown code. The manipulation of the argument userid leads to sql injection. This vulnerability was named CVE-2012-4258. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in F5 NGINX Open Source and NGINX Plus. This issue affects some unknown processing of the component ngx_http_mp4_module. The manipulation leads to buffer over-read. The identification of this vulnerability is CVE-2024-7347. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been rated as critical. This issue affects some unknown processing of the component cri-o. The manipulation leads to improper authorization. The identification of this vulnerability is CVE-2024-8676. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in buc Traceroute up to 2.1.2. It has been classified as problematic. This affects an unknown part of the component Command Line Handler. The manipulation leads to Local Privilege Escalation. This vulnerability is uniquely identified as CVE-2023-46316. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in ISC BIND up to 9.11.37/9.16.50/9.18.32/9.20.4/9.21.3. Affected by this issue is some unknown functionality of the component Additional Section Record Handler. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2024-11187. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in ISC BIND up to 9.18.32/9.20.4/9.21.3. This affects an unknown part of the component DNS-over-HTTPS. The manipulation leads to resource consumption. This vulnerability is uniquely identified as CVE-2024-12705. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Intel System Studio. This vulnerability affects unknown code. The manipulation leads to uncontrolled search path. This vulnerability was named CVE-2021-33064. The attack needs to be approached locally. There is no exploit available.

A vulnerability was found in Intel NUC HDMI Firmware Update Tool up to 1.78.2.0.6 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2022-26024. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in WSO2 API Manager, Identity Server, Identity Server Analytics, Identity Server as Key Manager and Enterprise Integrator and classified as very critical. Affected by this vulnerability is an unknown functionality of the component File Upload Handler. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2022-29464. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Oracle Retail Bulk Data Integration 16.0.3 and classified as very critical. This issue affects some unknown processing of the component BDI Job Scheduler. The manipulation leads to code injection. The identification of this vulnerability is CVE-2022-22965. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Retail Customer Management and Segmentation Foundation 17.0/18.0/19.0. It has been classified as very critical. Affected is an unknown function of the component Security. The manipulation leads to code injection. This vulnerability is traded as CVE-2022-22965. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Retail Financial Integration 14.1.3.2/15.0.3.1/16.0.3/19.0.1. It has been rated as very critical. Affected by this issue is some unknown functionality of the component PeopleSoft Integration Bugs. The manipulation leads to code injection. This vulnerability is handled as CVE-2022-22965. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as very critical has been found in Oracle Retail Integration Bus 14.1.3.2/15.0.3.1/16.0.3/19.0.1. This affects an unknown part of the component RIB Kernal. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2022-22965. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as very critical was found in Oracle Retail Merchandising System 16.0.3/19.0.1. This vulnerability affects unknown code of the component Foundation. The manipulation leads to code injection. This vulnerability was named CVE-2022-22965. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Commerce Guided Search 11.3.2. It has been classified as very critical. This affects an unknown part of the component Content Acquisition System. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2022-22965. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.