140 matches found
MiracleLinux 4 : cups-1.4.2-67.1.0.1.AXS4 (AXSA:2015-156:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-156:01 advisory. The Common UNIX Printing System provides a portable printing layer for UNIX operating systems. It has been developed by Easy Software Products to...
EUVD-2026-1159
pnpm is a package manager. Versions 6.25.0 through 10.26.2 have a Command Injection vulnerability when using environment variable substitution in .npmrc configuration files with tokenHelper settings. An attacker who can control environment variables during pnpm operations could achieve Remote Cod...
CVE-2013-1159
Cross-site scripting XSS vulnerability in the Netcool Impact NCI web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56706...
CVE-2016-1159
In ZOHO Password Manager Pro PMP 8.3.0 Build 8303 and 8.4.0 Build 8400,8401,8402, underprivileged users can obtain sensitive information entry password history via a vulnerable hidden service...
Linux Distros Unpatched Vulnerability : CVE-2015-1159
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the cgiputs function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inje...
Linux Distros Unpatched Vulnerability : CVE-2011-1159
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows...
CVE-2025-1159
A vulnerability was found in CampCodes School Management Software 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academic-calendar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit h...
CVE-2025-1159
creationtimestamp| type| source ---|---|--- 2025-02-10 22:05:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113981856163116990 2025-02-10 22:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhu6atcfp622 2025-02-11 00:14:18+00:00| seen|...
CVE-2025-1159 CampCodes School Management Software academic-calendar cross site scripting
A vulnerability was found in CampCodes School Management Software 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academic-calendar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit h...
CVE-2025-1159
The CVE-2025-1159 affects CampCodes School Management Software 1.0. An unknown functionality in /academic-calendar is vulnerable to cross-site scripting, allowing remote exploitation. The vulnerability is described as problematic with public exploitation disclosed. Affected components and precise...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1159)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-1159
Rockwell Automation Studio 5000 Logix Designer all versions are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user...
A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.
...
RHEL 6 : acpid (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - acpid: blocked writes can lead to acpid daemon hang CVE-2011-1159 - acpid: Unsafe umask for actions...
WordPress Bold Page Builder Plugin <= 4.8.0 is vulnerable to Cross Site Scripting (XSS)
Software Bold Page Builder Type Plugin Vulnerable versions = 4.8.0 Fixed in 4.8.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1159 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 02c635193115 Credits RandomRoot Required...
CVE-2024-1159 Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...
CVE-2024-1159
CVE-2024-1159 concerns the Bold Page Builder WordPress plugin. A stored cross-site scripting (XSS) flaw exists in all versions up to and including 4.8.0, caused by insufficient input sanitization and output escaping on shortcode attributes. Exploitation requires authenticated access at contributo...
SUSE CVE-2023-42366
A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...
