MiracleLinux 4 : libxml2-2.7.6-14.1.0.2.AXS4 (AXSA:2014-350:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-350:02 advisory. This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes...

EUVD-2019-0191

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2023-0191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds access may lead to denial of...

CVE-2024-0191

A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/uploads/. The manipulation leads to file and directory information exposure. It is possible to launch the attack remotely. The exploit...

CVE-2020-0191

In ih264dupdatedefaultindexlist of ih264ddpbmgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android...

CVE-1999-0191

IIS newdsn.exe CGI script allows remote users to overwrite files...

CVE-2025-0191

creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr43rj2e2m...

CVE-2025-0191

CVE-2025-0191 affects gaizhenbiao/chuanhuchatgpt (v20240914). The DoS arises from improper handling of form-data with an oversized filename in the file-upload function. A payload with a very large filename can overwhelm the server, making it unresponsive and unavailable to legitimate users. The C...

Linux Distros Unpatched Vulnerability : CVE-2014-0191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7....

RHEL 8 : Red Hat OpenStack Platform 17.1 (openstack-tripleo-common) (RHSA-2024:0191)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0191 advisory. This update affects a Python library for code used by TripleO projects. Security Fixes: sudo privilege escalation vulnerability CVE-2022-38060 For mo...

CVE-2024-0191

creationtimestamp| type| source ---|---|--- 2024-01-02 21:26:22+00:00| seen| https://t.me/ctinow/162029 2024-01-03 01:36:48+00:00| seen| https://t.me/cibsecurity/74195 2024-01-08 17:16:32+00:00| seen| https://t.me/ctinow/164500 2024-01-22 18:11:32+00:00| seen| https://t.me/ctinow/171341...

CVE-2024-0191 RRJ Nueva Ecija Engineer Online Portal file information disclosure

A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/uploads/. The manipulation leads to file and directory information exposure. It is possible to launch the attack remotely. The exploit...

CVE-2024-0191

The CVE-2024-0191 entry concerns RRJ Nueva Ecija Engineer Online Portal 1.0. Affects an unknown function under the /admin/uploads/ path, enabling remote disclosure of file and directory information. Public exploit details exist, indicating potential remote abuse with low attack complexity and no ...

CVE-2023-0191

creationtimestamp| type| source ---|---|--- 2023-04-01 12:23:07+00:00| seen| https://t.me/cibsecurity/61304...

CVE-2023-0191

The CVE-2023-0191 entry concerns NVIDIA GPU Display Driver for Windows and Linux. The vulnerability is in the kernel-mode layer handler, described as an out-of-bounds access that may cause denial of service or data tampering. No vendor/version-specific affected products or patch/fix details are p...

Debian: Security Advisory (DLA-151-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple security vulnerabilities in IBM Sales Center for WebSphere Commerce (CVE-2008-7271, CVE-2010-4647, CVE-2012-0186, CVE-2012-0191, CVE-2012-2159, CVE-2012-2161)

Abstract Multiple security vulnerabilities have been identified in IBM Sales Center for WebSphere Commerce V6.0 and V7.0 Content VULNERABILITY DETAILS – Directory Traversal CVE ID: CVE-2012-0186 DESCRIPTION: Specially crafted URLs can be sent to the Eclipse Help component of IBM Sales Center for...

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0191 and CVE-2016-0193...

CVE-2022-0191

creationtimestamp| type| source ---|---|--- 2022-05-02 20:28:22+00:00| seen| https://t.me/cibsecurity/41750...

CVE-2022-0191

The CVE-2022-0191 entry concerns the Ad Invalid Click Protector (AICP) WordPress plugin prior to version 1.2.7. The root cause is a missing CSRF check when deleting banned users, allowing a logged-in administrator to remove arbitrary bans via CSRF. Documents confirm this affects the AICP plugin a...