RHEL 7 : firefox (RHSA-2022:1284)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1284 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2022-1284

creationtimestamp| type| source ---|---|--- 2022-04-08 22:13:15+00:00| seen| https://t.me/cibsecurity/40401...

CVE-2022-1284

heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service...

CVE-2022-1284 heap-use-after-free in radareorg/radare2

heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service...

CVE-2022-1284

heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service...

CVE-2022-1284

CVE-2022-1284 affects radare2 prior to version 5.6.8 and is caused by a heap-use-after-free in the codebase, leading to a denial of service. The connected sources (NVD/NVD-derived listings and multiple vendor/security trackers) consistently describe the same flaw and impact. Public details in the...

Oracle Linux 7 : firefox (ELSA-2022-1284)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-1284 advisory. 91.8.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2022-1284)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco SD-WAN vManage Software Authentication Bypass (cisco-sa-sdw-auth-bypass-65aYqcS2)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability in the web-based messaging service interface. An unauthenticated, adjacent attacker can exploit this, by sending crafted HTTP requests, to gain unauthenticated read and write access to the affecte...

CVE-2021-1284

CVE-2021-1284 describes an authentication bypass vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software. An unauthenticated, adjacent attacker can exploit crafted HTTP requests to bypass authentication/authorization and gain unauthenticated read and write acce...

Microsoft Patch Tuesday June 2020: The Bleeding Ghost of SMB

This time, Microsoft addressed 129 vulnerabilities: 11 critical and 118 important. In fact, in the file that I exported from the Microsoft website, I saw 2 more CVEs CVE-2020-1221, CVE-2020-1328 related to Microsoft Dynamics 365 on-premises. But there is no information on them on the Microsoft...

CVE-2020-1284

CVE-2020-1284 is a denial-of-service vulnerability in the SMBv3 protocol (SMBv3 Client/Server) for Microsoft Windows. The issue arises from how SMBv3 handles certain requests, allowing an authenticated SMB server attacker to cause the target system to crash, and an unauthenticated attacker to cra...

Microsoft June Patch Tuesday Fixes 129 Flaws in Largest-Ever Update

Microsoft has released patches for 129 vulnerabilities as part of its June Patch Tuesday updates – the highest number of CVEs ever released by Microsoft in a single month. Within the blockbuster security update, 11 critical remote code-execution flaws were patched in Windows, SharePoint server,...

Microsoft Windows SMB Driver Out of Bounds Read (CVE-2020-1284)

An out of bound memory read issue has been identified in SMB driver. A remote attacker could exploit the vulnerability by sending a crafted request...

CVE-2019-1284

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'...

CVE-2019-1284

CVE-2019-1284 is a DirectX elevation of privilege vulnerability. The issue arises from improper handling of objects in memory within DirectX, allowing a logged-on attacker to run arbitrary code in kernel mode via a specially crafted application, potentially enabling full control over the affected...

Microsoft Windows DirectX CVE-2019-1284 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for...

Microsoft DirectX Elevation of Privilege (CVE-2019-1284)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Security Bulletin: IBM MQ Passwords specified by MQ java or JMS applications can appear in WebSphere Application Server trace. (CVE-2017-1284)

Summary Passwords specified by MQ java or JMS applications can appear in WebSphere Application Server trace when establishing CLIENT transport mode connections. Vulnerability Details CVEID: CVE-2017-1284 DESCRIPTION: IBM MQ could allow a local user with ability to run or enable trace, to obtain...

CVE-2018-1284

In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs xpath/xpathstring/xpathboolean/xpathnumber/xpathdouble/xpathfloat/xpathlong/xpathint/xpathshort to expose the content of a file on the machine running HiveServer2 owned by HiveServer2 user usually hive if...