130 matches found
CVE-2021-1384
creationtimestamp| type| source ---|---|--- 2022-08-25 07:00:04+00:00| seen| https://t.me/poxek/2358...
CVE-2022-1384
creationtimestamp| type| source ---|---|--- 2022-04-20 00:30:55+00:00| seen| https://t.me/cibsecurity/41141...
CVE-2022-1384 Authorized users are allowed to install old plugin versions from the Marketplace
Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin version from the Marketplace which might have known vulnerabilities...
CVE-2022-1384 Authorized users are allowed to install old plugin versions from the Marketplace
Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin version from the Marketplace which might have known vulnerabilities...
CVE-2022-1384
CVE-2022-1384 concerns Mattermost 6.4.x and earlier, where the system fails to properly validate the version of a plugin when installed from the Marketplace. The root cause is a deficient plugin-version check, which enables an authenticated and authorized user to install and potentially exploit a...
Oracle Linux 7 : nss (ELSA-2021-1384)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1384 advisory. 3.53.1-7 - Fix HSM load failure because of CKOProfile - Allow builds with strict-proto 3.53.1-6 - Update to CVE 2020-256423 TLS flood DOS attack patch. 3.53.1-5...
RHEL 7 : nss (RHSA-2021:1384)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1384 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...
SUSE: Security Advisory (SUSE-SU-2015:1384-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1384
Summary of vulnerability details : CVE-2021-1384 affects Cisco IOx in Cisco IOS XE Software, enabling an authenticated, remote attacker to inject commands into the underlying OS as root. The root cause is incomplete validation of fields in application packages loaded onto IOx, exploitable by load...
Cisco IOS XE Software IOx for Command Injection (cisco-sa-iox-cmdinj-RkSURGHG)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation CNG Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384...
CVE-2020-1384
CVE-2020-1384 is an elevation-of-privilege issue in the Windows Cryptography Next Generation (CNG) Key Isolation Service where memory is not handled correctly. The vulnerability enables local attackers to elevate privileges by exploiting the memory handling defect. This CVE is related to CVE-2020...
woodblock.com Cross Site Scripting vulnerability
Security Researcher 4NCURZE Helped patch 1384 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting woodblock.com website and its users. Following coordinated...
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2019-1384)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4525237)
This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Multiple Vulnerabilities (KB4523205)
This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
CVE-2019-1384
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'...
CVE-2019-1384
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'...
KB4525241: Windows 10 Version 1709 November 2019 Security Update
The remote Windows host is missing security update 4525241. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel. An attacker who successfully exploited the vulnerability...
Microsoft Windows CVE-2019-1384 Security Bypass Vulnerability
Description Microsoft Windows is prone to a security bypass vulnerability. Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Technologies Affected Microsoft Windows 10 Version 1607 for...