CVE-2023-1412

creationtimestamp| type| source ---|---|--- 2023-04-05 20:26:24+00:00| seen| https://t.me/cibsecurity/61474...

CVE-2023-1412 Local Privilege Escalation Vulnerability in WARP's MSI Installer

An unprivileged non-admin user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windows = 2022.12.582.0 to perform privileged operations with SYSTEM context by working with a combination of opportunistic locks oplock and symbolic links which can both be creat...

CVE-2023-1412

The CVE-2023-1412 issue affects Cloudflare WARP Client for Windows (versions ≤ 2022.12.582.0). The root cause is an Improper Access Control in the MSI installer repair function stored under C:\Windows\Installer, exploitable by an unprivileged user to execute privileged SYSTEM context operations v...

CVE-2018-1412

CVE-2018-1412 affects IBM DOORS Next Generation (DNG/RRC) with a cross-site scripting flaw in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure in a trusted session. Affected: Rational DOORS Next Generation 6.0–6.0.5 (note: 6.0.6 is not affected)...

CVE-2022-1412

The Log WPMail WordPress plugin through 0.1 saves sent email in a publicly accessible directory using predictable filenames, allowing any unauthenticated visitor to obtain potentially sensitive information like generated passwords...

CVE-2022-1412

The Log WPMail WordPress plugin through 0.1 saves sent email in a publicly accessible directory using predictable filenames, allowing any unauthenticated visitor to obtain potentially sensitive information like generated passwords...

CVE-2022-1412 Log WP_Mail <= 0.1 - Email Logs Publicly Accessible

The Log WPMail WordPress plugin through 0.1 saves sent email in a publicly accessible directory using predictable filenames, allowing any unauthenticated visitor to obtain potentially sensitive information like generated passwords...

CVE-2022-1412

The CVE-2022-1412 affects the WordPress Log WP_Mail plugin (versions

SUSE SLED15 / SLES15 Security Update : libnettle (SUSE-SU-2021:1412-1)

This update for libnettle fixes the following issues : CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars bsc1184401. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

Cisco Identity Services Engine Sensitive Information Disclosure (cisco-sa-ise-info-exp-8RsuEu8S)

According to its self-reported version, Cisco Identity Services Engine Software is affected by multiple information disclosure vulnerabilities in its admin portal component due to improper enforcement of administrator privilege levels for sensitive data. An authenticated, remote attacker can...

CVE-2021-1412

creationtimestamp| type| source ---|---|--- 2021-02-17 20:49:14+00:00| seen| https://t.me/cibsecurity/23763...

CVE-2021-1412

CVE-2021-1412 affects Cisco Identity Services Engine (ISE) Admin portal. The root cause is improper enforcement of administrator privilege levels for sensitive data, enabling an authenticated, read-only admin to browse pages containing sensitive configuration information and disclose it. Exploita...

CVE-1999-1412 affecting package httpd 2.4.46-3

CVE-1999-1412 affecting package httpd 2.4.46-3. A patched version of the package is available...

CVE-2020-1412

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'...

CVE-2020-1412

CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...

goindustrial.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1142420 Security Researcher 4NCURZE Helped patch 1412 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting goindustrial.co.uk website...

wellnessexpert.eu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1139291 Security Researcher 4NCURZE Helped patch 1412 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting wellnessexpert.eu website...

CVE-2019-1412

CVE-2019-1412 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll). The vulnerability is an information-disclosure flaw caused by improper handling of objects in memory, leading to partial confidentiality impact. Exploitation is Local with low attack complexity; no explicit exploitation...

Microsoft Windows 'ATMFD.dll' CVE-2019-1412 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Syste...

CVE-2017-1412

CVE-2017-1412 affects IBM Security Identity Governance and Intelligence (IGI) Virtual Appliance versions 5.2, 5.2.1, 5.2.2, 5.2.2.1, 5.2.3, 5.2.3.1, 5.2.3.2. Description in the IBM bulletin confirms that the vulnerability arises from an error message that exposes sensitive information about the e...