Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2023-0935 | DolphinPHP up to 1.5.1 Incomplete Fix CVE-2021-46097 common.php id os command injection


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in DolphinPHP up to 1.5.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file common.php of the component Incomplete Fix CVE-2021-46097. The manipulation of the argument id leads to os command injection. This vulnerability is known as CVE-2023-0935. The attack can be launched remotely. Furthermore, there is an exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Leptonica up to 1.75.3 Incomplete Fix CVE-2018-3836 gplotMakeOutput $(command) command injection


📈 34.99 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-7597 | codecov-node up to 3.6.4 on npm Incomplete Fix CVE-2020-7596 lib/codecov.js exec gcov-root os command injection


📈 30.07 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-37385 | Roundcube Webmail up to 1.5.6/1.6.6 on Windows Incomplete Fix CVE-2020-12641 im_convert_path/im_identify_path command injection


📈 30.07 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-36138 | Node.js up to 18.20.3/20.15.0/22.4.0 on Windows Incomplete Fix CVE-2024-27980 child_process.spawn/child_process.spawnSync command injection


📈 30.07 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: NUUO NVRmini Products CVE-2018-15716 Incomplete Fix Remote Command Injection Vulnerability


📈 29.49 Punkte
🕵️ Sicherheitslücken

🕵️ IBM Spectrum Protect Plus up to 10.1.5 Incomplete Fix CVE-2020-4211 command injection


📈 29.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-20059 | MFScripts YetiShare up to 4.5.4 Incomplete Fix CVE-2019-19732 payment_manage.ajax.php sSortDir_0 sql injection


📈 28.03 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Ansible CVE-2017-7466 Incomplete Fix Arbitrary Command Execution Vulnerability


📈 26.05 Punkte
🕵️ Sicherheitslücken

🕵️ Leptonica bis 1.75.3 Incomplete Fix CVE-2018-3836 gplotMakeOutput $(command) erweiterte Rechte


📈 26.05 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2012-4526 | Piwigo Incomplete Fix CVE-2012-4525 password.php username_or_email cross site scripting (BID-55710 / OSVDB-85817)


📈 24.58 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-21231 | deep-get-set Incomplete Fix CVE-2020-7715 deep code injection (SNYK-JS-DEEPGETSET-2342655)


📈 24.57 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP 'cdf_read_property_info()' Function CVE-2014-3587 Incomplete Fix Denial of Service Vulnerability


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP CVE-2015-0231 Incomplete Fix Use After Free Remote Code Execution Vulnerability


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP CVE-2015-4644 Incomplete Fix Null Pointer Deference Denial of Service Vulnerability


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP 'cdf_read_property_info()' Function CVE-2014-3587 Incomplete Fix Denial of Service Vulnerability


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP CVE-2015-0231 Incomplete Fix Use After Free Remote Code Execution Vulnerability


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP CVE-2015-4644 Incomplete Fix Null Pointer Deference Denial of Service Vulnerability


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP NULL Character CVE-2015-4025 Incomplete Fix Multiple Security Bypass Vulnerabilities


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Studio 42 elFinder bis 2.1.36 Incomplete Fix CVE-2018-09109 elFinder.class.php zipdl() Directory Traversal


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP CVE-2018-10547 Incomplete Fix Cross Site Scripting Vulnerability


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Studio 42 elFinder up to 2.1.36 Incomplete Fix CVE-2018-09109 elFinder.class.php zipdl() directory traversal


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Cockpit up to 0.4.4 Incomplete Fix CVE-2017-14611 /assets/lib/fuc.js.php url Server-Side Request Forgery


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-10212 | Responsive FileManager 9.13.4/9.14.0 Incomplete Fix upload.php url server-side request forgery (Issue 598)


📈 24.01 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Red Hat JBoss BRMS and BPM Suite CVE-2016-8608 Incomplete Fix HTML Injection Vulnerability


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Red Hat JBoss BRMS and BPM Suite CVE-2016-8608 Incomplete Fix HTML Injection Vulnerability


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ Logitech Unifying Devices Incomplete Fix CVE-2016-10761 Key Combination Injection weak encryption


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ IBM WebSphere MQ up to 9.1.1 Incomplete Fix CVE-2018-1792 Code Injection privilege escalation


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-16254 | Ruby up to 2.4.7/2.5.6/2.6.4 Incomplete Fix HTTP Response injection (DLA 2027-1)


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP 'ext/standard/var.c' Incomplete Fix Use After Free Remote Code Execution Vulnerability


📈 23.43 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP 'process_nested_data()' Incomplete Fix Use After Free Remote Code Execution Vulnerability


📈 23.43 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP 'ext/standard/var.c' Incomplete Fix Use After Free Remote Code Execution Vulnerability


📈 23.43 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: PHP 'process_nested_data()' Incomplete Fix Use After Free Remote Code Execution Vulnerability


📈 23.43 Punkte
🕵️ Sicherheitslücken

🕵️ phpMyBackupPro 2.1/2.2/2.3/2.4/2.5 Incomplete Fix get_file.php view Directory Traversal


📈 23.43 Punkte
🕵️ Sicherheitslücken

🕵️ phpMyBackupPro 2.1/2.2/2.3/2.4 Incomplete Fix get_file.php view Directory Traversal


📈 23.43 Punkte
🕵️ Sicherheitslücken

🕵️ Googlemaps Plugin bis 3.2 auf Joomla! Incomplete Fix plugin_googlemap3_kmlprxy.php url Denial of Service


📈 23.43 Punkte
🕵️ Sicherheitslücken

matomo
•