108 matches found
CVE-2022-0953 Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting
The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.96 does not sanitise and escape the QUERYSTRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters...
CVE-2022-0953
The CVE-2022-0953 entry describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin “Anti-Malware Security and Brute-Force Firewall” prior to version 4.20.96. The flaw stems from failure to sanitize/escape QUERY_STRING before returning it to an admin page, enabling XSS in bro...
SUSE SLED15 / SLES15 Security Update : perl-DBD-SQLite (SUSE-SU-2022:0953-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0953-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
openSUSE 15 Security Update : perl-DBD-SQLite (openSUSE-SU-2022:0953-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0953-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...
CVE-2021-0953
CVE-2021-0953 affects Android 9–12. The issue is in SearchWidgetProvider.setOnClickActivityIntent, where an unsafe PendingIntent could allow access to contacts and history bookmarks without permission, enabling local privilege escalation with no user interaction required. Android patch levels 202...
SUSE: Security Advisory (SUSE-SU-2016:0953-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-0953
creationtimestamp| type| source ---|---|--- 2020-05-08 07:36:13+00:00| seen| https://t.me/cibsecurity/11937...
CVE-2012-0953
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
CVE-2012-0953
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
CVE-2012-0953
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
CVE-2012-0953
The CVE-2012-0953 entry describes a race condition in the Linux Nvidia graphics driver that could allow an attacker to exfiltrate kernel memory to userspace. Affected component: Nvidia graphics driver for Linux (pre-295.53). Root cause: a race condition in the driver’s ioctl/path to memory, enabl...
CVE-2012-0953 Kernel heap contents leak race in ioctl handler
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
Remote code execution
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-099...
CVE-2020-0953
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-099...
CVE-2020-0953
CVE-2020-0953 is described as a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of memory objects. It affects Microsoft Windows/Windows Server Jet Database Engine components and, per CNVD entries, could be triggered by a user opening a specially ...
KB4550970: Windows 8.1 and Windows Server 2012 R2 April 2020 Security Update
The remote Windows host is missing security update 4550970 or cumulative update 4550961. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully...
KB4550965: Windows 7 and Windows Server 2008 R2 April 2020 Security Update
The remote Windows host is missing security update 4550965 or cumulative update 4550964. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploit...
KB4550930: Windows 10 April 2020 Security Update
The remote Windows host is missing security update 4550930. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...
Security Updates for Microsoft Office Online Server Apps (May 2019)
The Microsoft Office Online Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who...