189 matches found
CVE-2018-0156
creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 08:08:04+00:00| seen| https://t.me/arpsyndicate/1154 2024-12-24 20:27:51+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971339 2025-02-23 02:10:17+00:00|...
CVE-2023-0156
creationtimestamp| type| source ---|---|--- 2023-04-10 18:36:05+00:00| seen| https://t.me/cibsecurity/61763 2023-09-24 08:19:01+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5191...
CVE-2023-0156 All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal
The All-In-One Security AIOS WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user admin+ to view the contents of arbitrary files and list directories anywhere on the server to which the web server has access. The plugin only...
CVE-2023-0156 All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal
The All-In-One Security AIOS WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user admin+ to view the contents of arbitrary files and list directories anywhere on the server to which the web server has access. The plugin only...
CVE-2023-0156
The CVE concerns All-In-One Security (AIOS) WordPress plugin before v5.1.5. The issue permits an authorized admin+ user to view arbitrary server files and list directories via the plugin’s settings page, by bypassing limits on which log files are displayed. The impact is disclosure of file conten...
SUSE: Security Advisory (SUSE-SU-2023:0156-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
New TrueBot Malware Variant Leveraging Netwrix Auditor Bug and Raspberry Robin Worm
Cybersecurity researchers have reported an increase in TrueBot infections, primarily targeting Mexico, Brazil, Pakistan, and the U.S. Cisco Talos said the attackers behind the operation have moved from using malicious emails to alternative delivery methods such as the exploitation of a now-patche...
CVE-2014-0156
Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command...
CVE-2014-0156
Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command...
CVE-2014-0156
CVE-2014-0156 corresponds to an OS command injection in the Ruby gem awesome_spawn (ManageIQ). The vulnerability allows an attacker to execute arbitrary commands when untrusted input is passed as command arguments to AwesomeSpawn.run, via the underlying Kernel.spawn usage. The issue affects versi...
CVE-2022-0156 affecting package vim for versions less than 8.2.4081-1
CVE-2022-0156 affecting package vim for versions less than 8.2.4081-1. An upgraded version of the package is available that resolves this issue...
Intel CPU vulnerability CVE-2021-0156
Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable an escalation of privilege via local access. CVE-2021-0156 Impact An attacker may be able to exploit the Intel processor firmware to gain elevated access to resources. The...
Medium: vim
Issue Overview: It was found that vim was vulnerable to use-after-free flaw in the way it was treating allocated lines in user functions. A specially crafted file could crash the vim process or possibly lead to other undefined behaviors. CVE-2022-0156 It was found that vim was vulnerable to a 1...
Important Photon OS Security Update - PHSA-2022-0156
Updates of 'vim' packages of Photon OS have been released...
Amazon Linux AMI : vim (ALAS-2022-1567)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1567 advisory. 2024-02-14: CVE-2021-3778 was added to this advisory. 2024-02-14: CVE-2021-3875 was added to this advisory. 2024-02-14: CVE-2021-3872 was added to this advisory. A flaw was found in vim. A possibl...
CVE-2021-0156
Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable an escalation of privilege via local access...
CVE-2021-0156
CVE-2021-0156 involves Intel processor firmware and is caused by improper input validation, enabling a local authenticated user to potentially escalate privileges. Public sources in the provided documents indicate vulnerable firmware on specific platforms (e.g., VELOS CX410 and VELOS BX110 blades...
2021.2 IPU – BIOS Advisory
Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0103...
Mageia: Security Advisory (MGASA-2021-0156)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...