Vuldb Updates

A vulnerability was found in ChurchCRM 4.5.4. It has been classified as critical. Affected is an unknown function of the file /EditEventTypes.php of the component POST Parameter Handler. The manipulation of the argument EN_tyid leads to sql injection. This vulnerability is traded as CVE-2023-29842. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Zoho ManageEngine OPManager up to 126323. Affected is an unknown function of the component Probe Server. The manipulation leads to Privilege Escalation. This vulnerability is traded as CVE-2023-31099. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in inSpryker Commerce OS 0.9 and classified as critical. Affected by this issue is some unknown functionality of the file customer/order. The manipulation of the argument orderSearchForm[searchText] leads to sql injection. This vulnerability is handled as CVE-2023-27568. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Genomedics MilleGP5 5.9.2. This issue affects some unknown processing of the component File Handler. The manipulation leads to incorrect permission assignment. The identification of this vulnerability is CVE-2023-25438. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in BackWPup 1.7.1 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file wp_xml_export.php. The manipulation of the argument wpabs leads to code injection. This vulnerability is known as CVE-2011-4342. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple Safari up to 11.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component WebKit. The manipulation leads to race condition. This vulnerability is handled as CVE-2018-4192. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Myrephp MYRE Real Estate Software 2012. This vulnerability affects unknown code. The manipulation of the argument userid leads to sql injection. This vulnerability was named CVE-2012-4258. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in F5 NGINX Open Source and NGINX Plus. This issue affects some unknown processing of the component ngx_http_mp4_module. The manipulation leads to buffer over-read. The identification of this vulnerability is CVE-2024-7347. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been rated as critical. This issue affects some unknown processing of the component cri-o. The manipulation leads to improper authorization. The identification of this vulnerability is CVE-2024-8676. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in buc Traceroute up to 2.1.2. It has been classified as problematic. This affects an unknown part of the component Command Line Handler. The manipulation leads to Local Privilege Escalation. This vulnerability is uniquely identified as CVE-2023-46316. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in ISC BIND up to 9.11.37/9.16.50/9.18.32/9.20.4/9.21.3. Affected by this issue is some unknown functionality of the component Additional Section Record Handler. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2024-11187. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in ISC BIND up to 9.18.32/9.20.4/9.21.3. This affects an unknown part of the component DNS-over-HTTPS. The manipulation leads to resource consumption. This vulnerability is uniquely identified as CVE-2024-12705. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Intel System Studio. This vulnerability affects unknown code. The manipulation leads to uncontrolled search path. This vulnerability was named CVE-2021-33064. The attack needs to be approached locally. There is no exploit available.

A vulnerability was found in Intel NUC HDMI Firmware Update Tool up to 1.78.2.0.6 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2022-26024. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Communications Unified Inventory Management 7.4.1/7.4.2/7.5.0. It has been declared as very critical. This vulnerability affects unknown code of the component TMF APIs. The manipulation leads to code injection. This vulnerability was named CVE-2022-22965. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Communications Cloud Native Core Binding Support Function 22.1.3. It has been declared as very critical. This vulnerability affects unknown code of the component BSF. The manipulation leads to code injection. This vulnerability was named CVE-2022-22965. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0/14.1.1.0.0. It has been rated as very critical. Affected by this issue is some unknown functionality of the component Third Party Tools/Samples. The manipulation leads to code injection. This vulnerability is handled as CVE-2022-22965. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0/22.1.0 and classified as very critical. This vulnerability affects unknown code of the component OC SEPP. The manipulation leads to code injection. This vulnerability was named CVE-2022-22965. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Communications Cloud Native Core Unified Data Repository 1.15.0/22.1.0 and classified as very critical. This issue affects some unknown processing of the component UDR. The manipulation leads to code injection. The identification of this vulnerability is CVE-2022-22965. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Oracle Communications Policy Management 12.6.0.0.0. This issue affects some unknown processing of the component CMP. The manipulation leads to code injection. The identification of this vulnerability is CVE-2022-22965. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.