SUSE CVE-2013-1373

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x...

CVE-2022-1373

creationtimestamp| type| source ---|---|--- 2022-08-18 00:40:43+00:00| seen| https://t.me/cibsecurity/48303 2024-07-19 17:55:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/softingsisrce.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2022-1373 Softing Secure Integration Server Relative Path Traversal

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file...

CVE-2022-1373

CVE-2022-1373 affects Softing Secure Integration Server v1.22 and is a directory traversal flaw in the “restore configuration” feature when processing ZIPs, enabling an attacker to load an arbitrary DLL and execute code. The Metasploit entry documents a chained exploit with CVE-2022-2334, where a...

RHEL 7 : kpatch-patch (RHSA-2022:1373)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1373 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

RHEL 7 : kernel (RHSA-2021:1373)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1373 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: out-of-bounds read in libiscsi...

CVE-2021-1373

CVE-2021-1373 affects Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Wireless Controllers. The issue arises from insufficient validation of CAPWAP packets in CAPWAP processing, allowing an unauthenticated, remote attacker to cause a denial-of-service by sending malformed C...

Privilege escalation

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1427, CVE-2020-1438...

CVE-2020-1373

Technical details (affected products, root cause, impact, fixes) are not publicly available in the provided connected documents. Monitor for updates.

Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2020-1373)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Updates for Exchange (November 2019)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell. An attacker who...

CVE-2019-1373

A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'...

CVE-2019-1373

CVE-2019-1373 is a remote code execution vulnerability in Microsoft Exchange Server caused by deserialization of metadata via PowerShell. The issue affects Exchange servers and can be exploited by an attacker who can run PowerShell cmdlets against the server; the exact required privileges are not...

KLA11606 ACE vulnerability in Microsoft Exchange Server

Unspecified vulnerability was found in Exchange Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-1373 Related products Microsoft-Exchange-Server CVE list CVE-2019-1373 critical KB list 4523171 Solution Install necessary updates from th...

XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239

The version of the Application Links plugin used in Confluence before version 6.15.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the applinkStartingUrl parameter. See https://ecosystem.atlassian.net/browse/APL-1373 for more detail...

XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239

The version of the Application Links plugin used in Fisheye before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the applinkStartingUrl parameter. See https://ecosystem.atlassian.net/browse/APL-1373 for more details...

XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239

The version of the Application Links plugin used in Fisheye before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the applinkStartingUrl parameter. See https://ecosystem.atlassian.net/browse/APL-1373 for more details...

XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239

The version of the Application Links plugin used in Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the applinkStartingUrl parameter. See https://ecosystem.atlassian.net/browse/APL-1373 for more details...

Security Bulletin: IBM TRIRIGA Application Platform Reports Privilege Escalation (CVE-2017-1373)

Summary IBM TRIRIGA Application Platform Reports are vulnerable to a privilege escalation attack. Vulnerability Details CVEID: CVE-2017-1373 DESCRIPTION: Reports executed in the IBM TRIRIGA Application platform contains a vulnerability that could allow an authenticated user to execute a report th...

Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by an Invalid Account Lockout vulnerability (CVE-2018-1373)

Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability Vulnerability Details CVEID: CVE-2018-1373 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute...