117 matches found
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2026-1091)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2026-1091
The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'store' function of the...
CVE-2025-14403
creationtimestamp| type| source ---|---|--- 2025-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1091/...
EUVD-2016-1091
Malware in sbrugna...
CVE-2024-1091
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reinitialize function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2025-1091
A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known...
RHSA-2025:1091
creationtimestamp| type| source ---|---|--- 2025-02-26 07:24:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5477...
CVE-2025-1091
A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known...
CVE-2025-1091 Broken Authorization Schema
A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known...
CVE-2024-1091
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reinitialize function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2024-1091
The CVE-2024-1091 entry concerns ImageRecycle pdf & image compression for WordPress. A missing capability check in the reinitialize function across versions up to and including 3.1.13 leads to unauthorized data modification by authenticated users with subscriber-level access or higher. The vulner...
WordPress ImageRecycle pdf & image compression Plugin <= 3.1.13 is vulnerable to Broken Access Control
Software ImageRecycle pdf & image compression Type Plugin Vulnerable versions = 3.1.13 Fixed in 3.1.14 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1091 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0c9f4939f73b Credits Frances...
Oracle Linux 7 : python-twisted-web (ELSA-2020-1091)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1091 advisory. 12.1.0-6 - Fix CVE-2019-12387 HTTP Header Injection Resolves: rhbz1721518 Tenable has extracted the preceding description block directly from the Oracle Linux...
CVE-2023-1091
creationtimestamp| type| source ---|---|--- 2023-03-10 12:20:57+00:00| seen| https://t.me/cibsecurity/59779...
CVE-2023-1091
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection. This issue affects Licensed Warehousing Automation System: through 2023.1.01...
CVE-2023-1091
The CVE-2023-1091 entry describes an SQL Injection vulnerability in Alpata Licensed Warehousing Automation System (through version 2023.1.01). The issue arises from improper neutralization of input in SQL commands, enabling possible Command Line Execution. Affected component is the warehouse auto...
CVE-2023-1091 SQL Injection found in ALPATA's Licensed Warehousing Automation System
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection. This issue affects Licensed Warehousing Automation System: through 2023.1.01...
CVE-2023-1091 SQL Injection found in ALPATA's Licensed Warehousing Automation System
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection. This issue affects Licensed Warehousing Automation System: through 2023.1.01...
CentOS 7 : kernel (RHSA-2023:1091)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1091 advisory. - mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anonvma double reuse. CVE-2022-42703 - A stack overflow flaw was fou...
CentOS: Security Advisory for bpftool (CESA-2023:1091)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...