77 matches found
CVE-2023-1346 RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_page_cache'
The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clearpagecache function. This makes it possible for unauthenticated attackers to clear the...
CVE-2023-1346
CVE-2023-1346 affects the WordPress plugin RapidLoad Power-Up for Autoptimize (versions up to and including 1.7.1). The issue is a CSRF in the clear_page_cache function due to missing or incorrect nonce validation, allowing unauthenticated attackers to clear the plugin cache if a site admin is tr...
CVE-2022-1346
CVE-2022-1346 affects Organizr (causefx/organizr) prior to version 2.1.1810, due to multiple stored XSS in bookmark-related fields (Categories, Bookmark Tabs, Bookmark Categories). The underlying issue is lack of proper input validation/output encoding in these fields, enabling attackers to injec...
CVE-2022-1346 Multiple Stored XSS in causefx/organizr
Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse...
CVE-2021-1346
creationtimestamp| type| source ---|---|--- 2021-02-04 20:34:25+00:00| seen| https://t.me/cibsecurity/23075...
CVE-2021-1346
Cisco Small Business RV Series Routers (RV016, RV042, RV042G, RV082, RV320, RV325) are affected by CVE-2021-1346 due to improper validation of user-supplied input in the web-based management interface. An authenticated attacker with valid administrator credentials could send crafted HTTP requests...
CVE-2020-1346
Technical details about CVE-2020-1346 are not publicly provided in the connected documents. Monitor for updates from official advisories and third-party analyses.
Servicing stack update for Windows 10, version 1607: July 14, 2020
None None...
Servicing stack update for Windows Server 2008 SP2: July 14, 2020
Servicing stack update for Windows Server 2008 SP2: July 14, 2020 Applies to Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Server Core installation Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for...
Servicing stack update for Windows 10, version 1809: July 14, 2020
None None...
KB4565489: Windows 10 Version 1803 July 2020 Security Update
The remote Windows host is missing security update 4565489. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability...
KB4565483: Windows 10 Version 1903 and Windows 10 Version 1909 July 2020 Security Update
The remote Windows host is missing security update 4565483 or 4565554. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this...
RHEL 7 : python (RHSA-2020:1346)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1346 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2018-1346)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : dhcp (ALAS-2019-1346)
There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All...
Denial of service
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1346, CVE-2019-1347...
CVE-2019-1346
Technical details for CVE-2019-1346 are not provided in the connected documents. The materials reference a Windows memory-handling DoS but do not specify affected components, versions, impact, or remediation. Monitor for updates.
CVE-2019-1347
Technical details about CVE-2019-1347 are not provided in the connected documents. Public details (affected products, root cause, impact, or fixes) are not disclosed here. Monitor for updates and refer to the initial CVE entry for any forthcoming specifics.
Microsoft Windows Multiple Vulnerabilities (KB4519976)
This host is missing a critical security update according to Microsoft KB4519976 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
KLA11872 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...