115 matches found
CVE-2021-0124
Improper access control in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via physical access...
CVE-2021-0124
CVE-2021-0124 describes improper access control in Intel processor firmware that could let a privileged user escalate privileges with physical/local access. The vulnerability is documented across multiple sources (NVD entry; IBM QRadar advisories; F5 advisory) and is associated with privilege esc...
Mageia: Security Advisory (MGASA-2014-0124)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2019-0124)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2020-0124)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2018-0124)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 7 : firefox (RHSA-2022:0124)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0124 advisory. - It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR 91.5, Firefo...
CVE-2022-0124
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's Slack integration is incorrectly validating user input and allows to craft malicious URLs that are sent to slack...
CVE-2022-0124
CVE-2022-0124 affects GitLab versions prior to 14.4.5 and the ranges 14.5.0–14.5.3 and 14.6.0–14.6.1. The Slack integration improperly validates user input, enabling crafting of malicious URLs that are sent to Slack. The available connected documents reiterate the affected versions and the input-...
Oracle Linux 7 : firefox (ELSA-2022-0124)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-0124 advisory. 91.5.0-1.0.2 - Enabled aarch64 builds 91.5.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 3014329...
RHEL 7 : firefox (RHSA-2022:0124)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0124 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2021:0124-1)
This update for php7 fixes the following issue : CVE-2020-7071: Fixed an insufficient filter in parseurl that accepted URLs with invalid userinfo bsc1180706. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...
RHEL 8 : freetype (RHSA-2020:4949)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4949 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...
nacionaldefiadores.com Cross Site Scripting vulnerability OBB-1241049
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-0124
creationtimestamp| type| source ---|---|--- 2020-06-11 18:55:27+00:00| seen| Telegram/spy52EwrkP8cyzDKJR4R9kKqIufXfx4TN8kBCnLUGUPHQ...
CVE-2020-0124
CVE-2020-0124: In Android 10, InstalldNativeService.cpp markBootComplete has an out-of-bounds write due to a missing bounds check, enabling local elevation of privilege to System with no user interaction. The issue is documented as EoP (pixel/Android bulletin) and is addressed by a security updat...
CentOS Update for emacs-git CESA-2020:0124 centos7
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
RHEL 7 : git (RHSA-2020:0124)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0124 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...
CVE-2019-0124
CVE-2019-0124 affects Intel 6th Gen Core processors (and related families) with TXT support, due to insufficient memory protection that could let a local privileged user escalate privileges. Connected sources (Intel INTEL-SA-00220; Red Hat/CVE entries; CNVD/CVE catalogs) confirm the issue and the...
