EUVD-2026-1067

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the catchlpajax function in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to modify course contents b...

ECHO-1067-A582-BB32

Bulletin has no description...

EUVD-2023-1067

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-1067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injectio...

CVE-2013-1067

Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file...

CVE-2025-1067

creationtimestamp| type| source ---|---|--- 2025-02-25 17:15:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065651086000181 2025-02-25 17:23:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5338 2025-02-25 19:03:23+00:00| seen| https://t.me/cvedetector/18889 2025-08-22...

CVE-2025-1067 There is a code injection vulnerability in ArcGIS Pro

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the fil...

CVE-2025-1067

CVE-2025-1067 describes an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4. A low-privileged user with write access to the local filesystem can place a malicious executable that, when a specific ArcGIS Pro action is performed, may execute with the victim’s privileges. The issue...

RockyLinux 8 : kernel-rt (RLSA-2025:1067)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:1067 advisory. kernel: scsi: core: Fix unremoved procfs host directory regression CVE-2024-26935 kernel: arm64/sve: Discard stale CPU state when handling SVE traps...

RHEL 8 : kernel-rt (RHSA-2025:1067)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:1067 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

CVE-2024-1067 Mali GPU Kernel Driver allows improper GPU memory processing operations

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. On Armv8.0 cores, there are certain combinations of the...

CVE-2024-1067 Mali GPU Kernel Driver allows improper GPU memory processing operations

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. On Armv8.0 cores, there are certain combinations of the...

CVE-2020-1067

creationtimestamp| type| source ---|---|--- 2023-11-12 18:54:04+00:00| seen| https://t.me/arpsyndicate/130...

Oracle Linux 9 : pesign (ELSA-2023-1067)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-1067 advisory. - Resolves: CVE-2022-3560 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

RHEL 9 : pesign (RHSA-2023:1067)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:1067 advisory. The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fixes: pesign: Local privilege...

CVE-2023-1067

creationtimestamp| type| source ---|---|--- 2023-02-27 16:27:56+00:00| seen| https://t.me/cibsecurity/58943 2025-03-10 20:38:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7051...

CVE-2023-1067 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...

CVE-2023-1067 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...

CVE-2023-1067

Summary: CVE-2023-1067 is a Cross-site Scripting (XSS) vulnerability stored in the Pimcore repository (pimcore/pimcore) prior to version 10.5.18. Multiple sources describe the issue and indicate that Pimcore versions before 10.5.18 are affected. Root cause (as described in sources): a lack of inp...

CVE-2022-1067

The CVE-2022-1067 issue affects LifePoint Informatics Patient Portal (Product: LifePoint Informatics Patient Portal; Affected Version: LPI 3.5.12.P30). It is an Authentication Bypass using an alternate path or channel (CWE-288) where navigating to a URL with a patient ID causes the server to gene...