SUSE CVE-2015-1258

Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame...

CVE-2022-1258

creationtimestamp| type| source ---|---|--- 2022-04-14 18:19:08+00:00| seen| https://t.me/cibsecurity/40780...

CVE-2022-1258 SQL injection vulnerability in McAfee Agent's ePO extension

A blind SQL injection vulnerability in the ePolicy Orchestrator ePO extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server...

CVE-2022-1258

McAfee Agent (MA) ePolicy Orchestrator (ePO) extension vulnerable before 5.7.6 due to a blind SQL injection in the back-end database. An authenticated ePO administrator can perform arbitrary SQL queries, potentially enabling server command execution. Affected: MA/ePO extension prior to 5.7.6. Roo...

Mageia: Security Advisory (MGASA-2015-0235)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1258-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : 389-ds:1.4 (RHSA-2021:1258)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1258 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server an...

Cisco AnyConnect Secure Mobility Client Arbitrary File Read Vulnerability (cisco-sa-anyconnect-fileread-PbHbgHMj)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cisco-sa-anyconnect-fileread-PbHbgHMj advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

CVE-2021-1258

CVE-2021-1258 affects Cisco AnyConnect Secure Mobility Client. The upgrade component contains a flaw with insufficient file permission restrictions, allowing an authenticated, low-privilege, local attacker to read arbitrary files from the underlying OS by sending a crafted command via the local C...

MySQL Enterprise Monitor 3.4.x < 3.4.10 / 4.x < 4.0.7 / 8.x < 8.0.3 Multiple Vulnerabilities (Oct 2018 CPU)

According to its self-reported version, the MySQL Enterprise Monitor running on the remote host is affected by the following vulnerabilities in its subcomponents: - Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is...

CVE-2020-1258

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'...

CVE-2020-1258

CVE-2020-1258 is an elevation-of-privilege vulnerability in DirectX where objects in memory are improperly handled. The impact is local privilege escalation with the potential to compromise the system if an attacker can cause the vulnerable DirectX component to execute code with higher privileges...

Oracle GoldenGate for Big Data 12.2.0.1.x < 12.2.0.1.10 / 12.3.1.1.x < 12.3.1.1.6 Multiple Vulnerabilities (Oct 2018 CPU)

The version of Oracle GoldenGate for Big Data application located on the remote host is 12.2.0.1.x less than 12.2.0.1.10 or 12.3.1.1.x less than 12.3.1.1.6. It is, therefore, affected by multiple vulnerabilities : - An unspecified vulnerability exists in Oracle GoldenGate for Big Data. An...

CVE-2012-1258

The CVE-2012-1258 issue affects Plixer Scrutinizer NetFlow & sFlow Analyzer prior to version 9.0.1.19899, where the web application in cgi-bin/userprefs.cgi does not properly enforce permissions, enabling remote attackers to add administrator accounts via parameters newuser, pwd, and selectedUser...

CVE-2019-1258

CVE-2019-1258 concerns the Azure Active Directory Authentication Library (ADAL) On-Behalf-Of flow, where token caching can let an authenticated attacker operate in another user’s context. The vulnerability is described across multiple sources (Microsoft MSRC advisory and related advisories) as an...

CVE-2019-1258 Azure Active Directory Authentication Library Elevation of Privilege Vulnerability

...

KLA11544 A PE vulnerability in Microsoft Developer Tools

An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1258 Related products Microsoft-Azure CVE list CVE-2019-1258 high KB list Solution Install necessary updates from the KB...

Amazon Linux AMI : python27 (ALAS-2019-1258)

A security regression of CVE-2019-9636 was discovered in python, since commit d537ab0ff9767ef024f26246899728f0116b1ec3, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies,...

Oracle WebLogic Server Multiple Vulnerabilities (Apr 2019 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - An unspecified vulnerability in the Spring Framework allows a low privileged, remote attacker with network access via HTTP to compromise and takeover the Oracle Communications Unified...

Security Bulletin: Missing Authentication for Critical Function affects IBM Security Guardium (CVE-2017-1258)

Summary IBM Security Guardium does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2017-1258 DESCRIPTION: IBM Security Guardium does...