184 matches found
SUSE CVE-2007-0556
The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service server crash and possibly access database content via an "ALTE...
WordPress ContentStudio Plugin < 1.2.6 is vulnerable to Other Vulnerability Type
Software ContentStudio Type Plugin Vulnerable versions 1.2.6 Fixed in 1.2.6 OWASP Top 10 A1: Injection Classification Other Vulnerability Type CVE CVE-2023-0556 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 3749f412d25d Credits Marco Wotschka Required privilege...
CVE-2023-0556
The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to obtain the blog metadata via the function cstugetmetadata that...
Backdoor.Win32.Delf.zn Insecure Credential Storage
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9acdbfc9f7c1f6e589485b30aa91bfd2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.zn Vulnerability: Insecure Credential Storage Description: The default credentia...
CVE-2022-0556
creationtimestamp| type| source ---|---|--- 2022-04-11 16:15:59+00:00| seen| https://t.me/cibsecurity/40455...
CVE-2022-0556
CVE-2022-0556 describes a local privilege escalation in Zyxel AP Configurator (ZAC) version 1.1.4 caused by incorrect permission assignment in some directories. This allows an attacker to execute arbitrary code as a local administrator. Connected advisories (e.g., ZDI, PT-2022-13258) indicate a r...
CVE-2022-0556
A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP Configurator ZAC version 1.1.4, which could allow an attacker to execute arbitrary code as a local administrator...
Mageia: Security Advisory (MGASA-2014-0556)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2020-0152)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-0556
CVE-2021-0556: Affected component is getBlockSum in fastcodemb.cpp on Android 11. The issue is a heap buffer overflow leading to an out-of-bounds read that could cause local information disclosure. Exploitation details are not provided in the connected sources; user interaction is not required. N...
SUSE: Security Advisory (SUSE-SU-2020:3034-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:0918-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:3516-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NewStart CGSL MAIN 6.02 : bluez Vulnerability (NS-SA-2021-0072)
The remote NewStart CGSL host, running version MAIN 6.02, has bluez packages installed that are affected by a vulnerability: - Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service v...
SUSE SLES12 Security Update : bluez (SUSE-SU-2020:3516-1)
This update for bluez fixes the following issues : CVE-2020-0556: Fixed improper access control which may lead to escalation of privilege and denial of service by an unauthenticated user bsc1166751. Note that Tenable Network Security has extracted the preceding description block directly from the...
SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2020:3034-1)
This update for bluez fixes the following issues : CVE-2020-27153: Fixed crash on disconnect bsc1177895. CVE-2020-0556: Fixed potential escalation of privilege and denial of service via adjacent access, caused by improper access control bsc1166751. Note that Tenable Network Security has extracted...
Oracle Linux 8 : bluez (ELSA-2020-4481)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4481 advisory. 5.50-4 + bluez-5.50-4 - Fixing CVE-2020-0556 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
bluez security update
5.50-4 + bluez-5.50-4 - Fixing CVE-2020-0556...
Moderate: Red Hat Security Advisory: bluez security update
An update for bluez is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2020-2331)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...