CVE-2022-1361

creationtimestamp| type| source ---|---|--- 2022-12-12 11:00:33+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7345 2022-12-13 04:12:39+00:00| published-proof-of-concept| https://t.me/crackcodes/1751...

CVE-2022-1361

The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices...

CVE-2022-1361 Cambium Networks cnMaestro SQL Injection

The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices...

CVE-2022-1361

The CVE-2022-1361 entry affects Cambium Networks cnMaestro On-Premises, caused by improper neutralization of special elements used in an SQL command, enabling pre-auth data exfiltration of user and device information. Affected versions are cnMaestro On-Premises prior to 3.0.3-r32, 2.4.2-r29, and ...

CVE-2022-1361 Cambium Networks cnMaestro SQL Injection

The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices...

RHEL 8 : firefox (RHSA-2021:1361)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1361 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Cisco Releases Security Patches for Critical Flaws Affecting its Products

Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure ACI Multi-Site Orchestrator MSO that could allow an unauthenticated, remote attacker to bypass authentication on vulnerable devices. "An attacker could exploit this vulnerability by sending a crafted...

CVE-2021-1361

creationtimestamp| type| source ---|---|--- 2021-02-24 22:37:16+00:00| seen| https://t.me/cibsecurity/24109 2021-03-17 14:00:28+00:00| seen| https://t.me/icscert/397...

CVE-2021-1361

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite...

CVE-2021-1361

CVE-2021-1361 affects Cisco NX-OS on Nexus 3000/9000 switches in standalone NX-OS mode. A misconfigured TCP port 9075 allows unauthenticated remote attackers to create, delete, or overwrite arbitrary files with root privileges, including adding user accounts. Cisco’s advisory (cisco-sa-3000-9000-...

CVE-2020-1361

CVE-2020-1361 affects Windows WalletService, described as an information-disclosure vulnerability stemming from how WalletService handles memory. The entry notes an attacker would first need code execution on a victim system, making it a local-attack scenario with information disclosure as the im...

Amazon Linux AMI : icu (ALAS-2020-1361)

The version of icu installed on the remote host is prior to 50.2-4.0. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1361 advisory. An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-base...

CVE-2019-1361

CVE-2019-1361 is a confirmed vulnerability in Microsoft Graphics Components where memory objects are not handled safely, enabling an information disclosure. An attacker could obtain sensitive information by convincing a user to open a specially crafted file. The vulnerability is addressed by Micr...

Microsoft Windows Multiple Vulnerabilities (KB4519976)

This host is missing a critical security update according to Microsoft KB4519976 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

KLA11872 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...

The bundled Atlassian Application Links plugin had various XSS issues - CVE-2018-5227

The version of the bundled Atlassian Application Links plugin was vulnerable to XSS. See https://ecosystem.atlassian.net/browse/APL-1361 for more details...

CVE-2018-1361

IBM WebSphere Portal 8.5 and 9.0 are affected by a cross-site scripting (XSS) vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure in a trusted session. Public details indicate affected versions include 8.5.0.x before CF15 and 9.0.0...

sephora.com Open Redirect vulnerability

Vulnerable URL: http://www.sephora.com/affiliates.jsp?site=linkshare=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1361 VIP website status:| Yes Check sephora.com SSL...

CVE-2016-1361

CVE-2016-1361 affects Cisco IOS XR on GSR 12000 devices (through 4.3.2): the UDP ingress path does not properly validate a BFD header in UDP packets, allowing an unauthenticated remote attacker to cause a line-card restart and DoS. Evidence across multiple sources (Cisco advisory and CVE records)...

The vulnerability of the embedded software of the industrial Ethernet switch EKI models 1361, 1362, 1321, 122x, and 1322 allows a intruder to gain access to the device.

The embedded software of the industrial Ethernet switch EKI models 1361, 1362, 1321, 122x, and 1322 contains SSH keys by default. Exploiting this vulnerability allows a malicious actor to gain access to the device by establishing an SSH connection remotely...