CVE-2022-0379

CVE-2022-0379 affects microweber/microweber prior to version 1.2.11 and is a stored Cross-site Scripting (XSS) vulnerability. Public descriptions consistently identify XSS in microweber’s checkout/routing context, enabling injection of arbitrary JavaScript. Impact is listed as high in some source...

Backdoor.Win32.Antilam.14.o Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/2914f01e65d848655d4f1aac51ff04d1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Antilam.14.o Vulnerability: Unauthenticated Remote Command Execution Description: The...

CVE-2021-0379

CVE-2021-0379 is a media stack issue in Android 11 where getUpTo17bits in pvmp3_getbits.cpp can read out of bounds due to a heap buffer overflow, potentially enabling information disclosure without code execution. Documented impact is remote information disclosure with user interaction required f...

CVE-2020-0379

creationtimestamp| type| source ---|---|--- 2020-09-17 21:55:24+00:00| seen| https://t.me/cibsecurity/14731...

CVE-2020-0379

CVE-2020-0379 affects the Bluetooth service in Android 8.0–11, where a logic error enables spoofing and potential remote information disclosure without extra execution privileges. Exploitation requires user interaction. The issue is categorized as an Information Disclosure/ID within multiple Andr...

CVE-2020-0379

In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8...

Security Bulletin: IBM QRadar SIEM contains vulnerable components and libraries. (CVE-2015-0176, CVE-2016-0379, CVE-2016-3052)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2015-0176 DESCRIPTION: IBM WebSphere MQ is vulnerable to reflected cross-site scripting, caused by improper validation of...

Security Bulletin: IBM WebSphere MQ Invalid client protocol flows could cause denial of service (CVE-2016-0379)

Summary An invalid MQ client protocol flow could cause a memory access violation on the server which could impact other channels running in the same process. Vulnerability Details CVEID: CVE-2016-0379 DESCRIPTION: IBM WebSphere MQ could allow an authenticated user with queue manager rights to cau...

RHEL 7 : .NET Core on Red Hat Enterprise Linux (RHSA-2018:0379)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0379 advisory. .NET Core is a managed software framework. It implements a subset of the .NET framework APIs and includes a CLR implementation. New versions of .NET...

Fedora 27 : libgcrypt (2017-a9c79eed83)

Minor security update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

Fedora 25 : libgcrypt (2017-8cd171f540)

Minor security update release 1.7.9. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 26 : libgcrypt (2017-bcdeca9d41)

Minor security update release 1.7.9. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

[ASA-201709-14] lib32-libgcrypt: private key recovery

Arch Linux Security Advisory ASA-201709-14 ========================================== Severity: Medium Date : 2017-09-18 CVE-ID : CVE-2017-0379 Package : lib32-libgcrypt Type : private key recovery Remote : No Link : https://security.archlinux.org/AVG-403 Summary ======= The package lib32-libgcry...

CVE-2017-0379

CVE-2017-0379 affects libgcrypt before 1.8.1, where Curve25519 side-channel attacks could allow a local attacker to recover a secret key. Public advisories indicate the flaw in cipher/ecc.c and mpi/ec.c can enable private-key recovery on multi-user systems or VMs. Remediation is to upgrade to lib...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0379

Upstream security update. Follow RHBA-2017-0379 for details...

CVE-2015-0379

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 allows remote attackers to affect integrity via vectors related to PIA Core Technology...

CVE-2015-0379

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 allows remote attackers to affect integrity via vectors related to PIA Core Technology...

CVE-2015-0379

CVE-2015-0379 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools (PIA Core Technology) in PeopleSoft Products 8.54. Connected sources indicate an unspecified vulnerability enabling remote integrity impact, but do not provide concrete root-cause, vulnerable subcomponents beyond PIA Core ...

CVE-2014-0379

creationtimestamp| type| source ---|---|--- 2014-03-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31994...

CVE-2014-0379

CVE-2014-0379 affects Oracle Demantra (Demantra 12.2.1). Connected documents indicate a stored XSS in TaskSender that could allow an authenticated user’s browser to execute script, potentially enabling session hijacking and data modification. Fixed in Demantra 12.2.3 per the packetstorm entry; Or...