91 matches found
SUSE CVE-2014-1326
WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1...
CVE-2022-1326
The CVE-2022-1326 entry applies to the WordPress plugin Form - Contact Form, affected up to version 1.2.0 (and 1.2.4 in CNVD/CVE records) where Custom text fields were not sanitized/escaped, enabling Stored XSS by high-privilege users (e.g., admin) when embedding forms. Impact stated as Admin+ St...
Huawei EulerOS: Security Advisory for mailman (EulerOS-SA-2021-1326)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Micro Focus Operations Bridge Manager Local Privilege Escalation Exploit
This Metasploit module exploits an insecure permission vulnerability on a folder in Micro Focus Operations Bridge Manager. An unprivileged user such as Guest can drop a JSP file in an exploded WAR directory and then access it without authentication by making a request to the OBM server. This will...
CVE-2021-1326
creationtimestamp| type| source ---|---|--- 2021-02-04 20:34:42+00:00| seen| https://t.me/cibsecurity/23091...
CVE-2020-1326
A Cross-site Scripting XSS vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'...
CVE-2020-1326
CVE-2020-1326 is an XSS flaw in Azure DevOps Server caused by improper sanitization of user-supplied input. Reports in multiple sources (MSRC advisory) describe an authenticated attacker able to trigger cross-site scripting in the context of the affected user. The vulnerability affects Azure DevO...
KLA11859 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Windows Diagnostics Hub...
RHEL 8 : openstack-manila (RHSA-2020:1326)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1326 advisory. OpenStack Shared Filesystem Service Manila provides services to manage network filesystems for use by Virtual Machine instances. Security Fixes: User...
Security Bulletin: Permission checking vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1326)
Summary IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. Vulnerability Details CVEID: CVE-2017-1326 DESCRIPTION: IBM Sterling File...
Security Bulletin: User permission vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1326)
Summary IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. Vulnerability Details CVEID: CVE-2017-1326 DESCRIPTION: IBM Sterling File...
CVE-2012-1326
CVE-2012-1326 affects Cisco IronPort Web Security Appliance (WSA) up to and including version 7.5, where the software does not properly validate the basic constraints of the certificate authority in SSL/TLS. This misconfiguration could allow an unauthenticated, remote attacker to perform man‑in‑t...
CVE-2018-1326
CVE-2018-1326 is rejected/not used and does not represent an active vulnerability entry.
Amazon Linux AMI : file (ALAS-2019-1326)
cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write. CVE-2019-18218 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
CVE-2019-1326
CVE-2019-1326 describes a denial of service vulnerability affecting Windows Remote Desktop Protocol (RDP). The Red Hat entry repeats the DoS description (attacker connects via RDP and sends specially crafted requests) but provides no further technical details, affected software versions, root cau...
Microsoft Windows Multiple Vulnerabilities (KB4519976)
This host is missing a critical security update according to Microsoft KB4519976 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
KLA11872 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...
CVE-2015-1326
creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:44+00:00| seen| https://t.me/cibsecurity/3858...
CVE-2015-1326 python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp
python-dbusmock before version 0.15.1 AddTemplate D-Bus method call or DBusTestCase.spawnservertemplate method could be tricked into executing malicious code if an attacker supplies a .pyc file...