Cisco RV34x系列 授权远程代码执行漏洞（CVE-2021-1413 CVE-2021-1414 CVE-2021-1415）

...

CVE-2021-1413

CVE-2021-1413 affects Cisco RV340/RV340W/RV345/RV345P Dual WAN Gigabit VPN Routers. Affected component: web-based management interface. Root cause: HTTP requests are not properly validated, enabling an authenticated remote attacker to execute arbitrary code with the web service process privileges...

CVE-2020-1413

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404, CVE-2020-1414,...

CVE-2020-1413

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404, CVE-2020-1414,...

CVE-2020-1413

Technical details about CVE-2020-1413 are not publicly available in the provided Connected documents. Monitor for updates from official sources to obtain affected products, impact, and remediation information.

CVE-2020-1370

Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.

Huawei EulerOS: Security Advisory for nginx (EulerOS-SA-2020-1413)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4523205)

This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-1413

CVE-2019-1413 : Microsoft Edge security feature bypass (EdgeHTML-based). The vulnerability arises because Edge improperly handles extension requests and fails to request host permission for all_urls, exposing a potential security bypass. CVSS v3.1 base score: 4.3 (MEDIUM). No exploits or remediat...

KLA11605 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft Edge can be exploited remotely...

authd bug fix update

The authd packages contain authd, a small and fast RFC 1413 ident protocol daemon with both xinetd server and interactive modes that supports IPv6 and IPv4 as well as the more popular features of pidentd. Bug Fixes: authd authentication fails with ERROR:NO-USER BZ1730802 Users of authd are advise...

ashemaletube.com XSS vulnerability

Vulnerable URL: https://www.ashemaletube.com/search/aaaaa%27%22onmouseover%3D%22prompt%28%27OPENBUGBOUNTY%27%29%22bad%3D%22%3Edemoniuma%27aa%22%3E%3CONMOUSEOVER%3E%3CHERE%3E%3Cscript%3Eonload%3Dprompt%28%29%3CTAG%3EONMOUSEOVER/page1.html?sort=mw=y Details: Description| Value ---|--- Patched:| Yes...

openSUSE Security Update : ImageMagick (openSUSE-2016-1413)

This update for GraphicsMagick fixes the following security issues : - CVE-2016-9556: Maliciously crafted image headers could cause denial of service in image format detection routines boo1011130 - CVE-2016-9559: Maliciously crafted image headers could cause denial of service in image format...

CVE-2016-1413

Cisco Firepower Management Center Web Interface Code Injection Vulnerability (CVE-2016-1413) affects FMC versions 5.4.0–6.0.0.1. The issue stems from improper sanitization of certain parameter values, allowing an authenticated, remote attacker to inject code and modify pages in the web interface....

Oracle: Security Advisory (ELSA-2012-1413)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1413

CVE-2013-1413 involves multiple XSS flaws in i-doit/open and i-doit Pro (pre-1.0) where output encoding is insufficient when the sanitize user input flag is not enabled. Exploitation would allow remote script/HTML injection via unspecified vectors and user sessions. The CSNC advisory and related ...

CVE-2013-1413

Multiple cross-site scripting XSS vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the 'sanitize user input' flag is not enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Oracle Linux 5 / 6 : thunderbird (ELSA-2012-1413)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-1413 advisory. 10.0.10-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 10.0.10-1 - Update to 10.0.10 ESR Tenabl...

CentOS Update for thunderbird CESA-2012:1413 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...