90 matches found
CVE-2022-1239
The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the editposts capability by default contributor and above to perform SSRF attacks...
CVE-2022-1239
CVE-2022-1239 concerns the WordPress HubSpot plugin prior to 8.8.15. The vulnerability stems from the proxy REST endpoint not validating the provided proxy URL, enabling an authenticated user with the edit_posts capability (default Contributor+) to perform server-side request forgery (SSRF). Affe...
CVE-2016-1239
creationtimestamp| type| source ---|---|--- 2022-02-19 20:39:20+00:00| seen| https://t.me/cibsecurity/37825...
CVE-2016-1239
duck before 0.10 did not properly handle loading of untrusted code from the current directory...
CVE-2016-1239
duck before 0.10 did not properly handle loading of untrusted code from the current directory...
CVE-2016-1239
duck before 0.10 did not properly handle loading of untrusted code from the current directory...
CVE-2016-1239
duck before 0.10 did not properly handle loading of untrusted code from the current directory...
CVE-2016-1239
CVE-2016-1239 concerns the Duck interpreter prior to 0.10, where loading of untrusted code from the current directory is mishandled. The vulnerability allows an attacker to influence code loaded from the working directory, with the NVD metrics indicating a high-severity impact (CVSS v3.1: CRITICA...
MSC-2021-1239
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
Important: Red Hat Security Advisory: dpdk security update
An update for dpdk is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
CVE-2021-1239
creationtimestamp| type| source ---|---|--- 2021-01-14 00:54:40+00:00| seen| https://t.me/cibsecurity/22124 2021-07-29 05:17:45+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/171...
CVE-2021-1239
CVE-2021-1239 refers to multiple stored XSS vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). An authenticated, remote attacker could lure a user to click a crafted link, triggering arbitrary script execution or access to browser data due to inadequ...
Microsoft Windows Multiple Vulnerabilities (KB4561612)
This host is missing a critical security update according to Microsoft KB4561612 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Memory corruption
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1239...
CVE-2020-1239
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238...
CVE-2020-1239
CVE-2020-1239 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The CVSS v3.1 base score is 8.8 (HIGH): network attack vector, no privileges required, UI required, and the impact is high on confidentiality, integrity, and availabili...
KB4561621: Windows 10 Version 1803 June 2020 Security Update
The remote Windows host is missing security update 4561621. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute...
KB4561602: Windows 10 Version 1709 June 2020 Security Update
The remote Windows host is missing security update 4561602. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execu...
Mozilla Firefox ESR Security Advisories (MFSA2020-16, MFSA2020-18) - Windows
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...