CVE-2025-1390

CVE-2025-1390 affects the PAM module pam_cap.so in libcap. During parsing, group names that do not start with @ may be misinterpreted as group names, potentially allowing an attacker to grant an inherited capability set and escalate locally on systems using /etc/security/capability.conf. The issu...

CVE-2025-26343

A CWE-1390 "Weak Authentication" in the PIN authentication mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to brute-force user PINs via multiple crafted HTTP requests...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-058)

The version of kernel installed on the remote host is prior to 5.10.29-27.126. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-058 advisory. 2024-06-06: CVE-2021-28951 was added to this advisory. An issue was discovered in fs/iouring.c in the Linu...

RHEL 9 : ovn23.09 (RHSA-2024:1390)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1390 advisory. OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native...

EulerOS Virtualization 2.10.0 : python-urllib3 (EulerOS-SA-2024-1390)

According to the versions of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the Cookie HTTP header special or provide...

CVE-2024-1390

creationtimestamp| type| source ---|---|--- 2024-03-06 07:36:24+00:00| seen| https://t.me/ctinow/201070...

WordPress Paid Member Subscriptions Plugin <= 2.11.1 is vulnerable to Broken Access Control

Software Paid Member Subscriptions Type Plugin Vulnerable versions = 2.11.1 Fixed in 2.11.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1390 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6361d41c5a14 Credits Lucio Sá Required...

CVE-2019-1390

creationtimestamp| type| source ---|---|--- 2024-02-11 13:02:01+00:00| seen| https://t.me/ctinow/182774...

CVE-2023-5046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Procost: before 1390...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Procost: before 1390...

Biltay Technology Scienta SQL Injection Vulnerability

Biltay Technology Scienta is a mobile application from Biltay Technology designed for enterprise management. A SQL injection vulnerability exists in versions prior to Biltay Technology Scienta v.1390 that stems from incorrect neutralization of special elements used in SQL commands...

PT-2023-31563

Name of the Vulnerable Software and Affected Versions Biltay Technology Procost versions prior to 1390 Description The issue is related to an SQL Injection vulnerability, allowing for improper neutralization of special elements used in an SQL command. This can lead to SQL Injection and Command Li...

CVE-2015-1390

creationtimestamp| type| source ---|---|--- 2023-09-05 22:17:03+00:00| seen| https://t.me/cibsecurity/69893...

CVE-2015-1390

Aruba AirWave before 8.0.7 is affected by a Cross-Site Scripting (XSS) vulnerability in the administrator-facing web interface. The root cause is described as a lack of protection for the web page structure, enabling a remote attacker to perform client-side script injections through the admin UI....

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch-4180-1931001, kpatch-patch-4180-1931051, kpatch-patch-4180-193951, and kpatch-patch-4180-193981 is now available for Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. ...

RHEL 8 : kpatch-patch (RHSA-2023:4146)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4146 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

RHEL 8 : kernel-rt (RHSA-2023:4126)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4126 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

SUSE: Security Advisory (SUSE-SU-2023:2805-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : kernel (Live Patch 22 for SLE 15 SP3) (SUSE-SU-2023:2741-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2741-1 advisory. This update for the Linux Kernel 5.3.18-1503005987 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed...

SUSE-SU-2023:2701-1 Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059115 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality bsc1209672. - CVE-2023-31436: Fixed an out-of-bounds write i...