injection vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file....

Wireshark Wireshark 3.4.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33

10

CVSSv2

CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection....

Yaws Yaws

9

CVSSv2

A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to incorrect input validation of user-supplied data. An attacker could...

Cisco Application Policy Infrastructure Controller Enterprise Module Dnac1.1

5

CVSSv2

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223....

Xen Xen

5

CVSSv2

Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed....

Apache Camel

4.3

CVSSv2

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user...

Cisco Webex Business Suite Cisco Webex Meetings Online1 Article available

7.5

CVSSv2

Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter....

Redhat Openstack 3.0 Theforeman Foreman 1.2.0 Theforeman Foreman 1.2.1 Theforeman Foreman

4

CVSSv2

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that...

Cisco Unified Communications Manager Cisco Unified Communications Manager Im And Presence Service

4

CVSSv2

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that...

Cisco Unified Communications Manager Cisco Unified Communications Manager Im And Presence Service

4

CVSSv2

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that...

Cisco Unified Communications Manager Cisco Unified Communications Manager Im And Presence Service

« PREV 1 2 3 4 5 6 7 8 9 NEXT »