115 matches found
Rocky Linux 9 : libreoffice (RLSA-2024:1427)
The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:1427 advisory. - Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary...
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1427)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 9 : libreoffice (ELSA-2024-1427)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1427 advisory. - Fix CVE-2023-6185 escape url passed to gstreamer Tenable has extracted the preceding description block directly from the Oracle Linux security...
WordPress Photo Gallery by 10Web Plugin < 1.8.15 is vulnerable to Directory Traversal
Software Photo Gallery by 10Web Type Plugin Vulnerable versions 1.8.15 Fixed in 1.8.15 OWASP Top 10 A6: Security Misconfiguration Classification Directory Traversal CVE CVE-2023-1427 Patch priority Low CVSS severity Low 6.8 Developer Claim ownership PSID f915d3bc46f4 Credits Nguyen Huu Do Require...
CVE-2023-1427
The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector...
CVE-2023-1427 Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector...
CVE-2023-1427
The CVE-2023-1427 entry describes a path traversal vulnerability in the WordPress plugin Photo Gallery by 10Web, affecting versions prior to 1.8.15. The root cause is that uploaded files were not consistently kept within the plugin’s intended uploads directory, allowing high-privilege users to pl...
CVE-2023-1427 Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector...
WordPress 1 jQuery Photo Gallery Slideshow Flash Plugin < 1.8.15 is vulnerable to Path Traversal
Software 1 jQuery Photo Gallery Slideshow Flash Type Plugin Vulnerable versions 1.8.15 Fixed in 1.8.15 OWASP Top 10 A1: Injection Classification Path Traversal CVE CVE-2023-1427 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID d99626b803b8 Credits Nguyen Huu Do Required...
CVE-2022-1427
creationtimestamp| type| source ---|---|--- 2022-04-23 07:28:25+00:00| seen| https://t.me/cibsecurity/41364...
CVE-2022-1427
Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...
CVE-2022-1427
Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...
CVE-2022-1427 Out-of-bounds Read in mrb_obj_is_kind_of in in mruby/mruby
Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...
CVE-2022-1427
Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...
CVE-2022-1427
Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...
CVE-2022-1427 Out-of-bounds Read in mrb_obj_is_kind_of in in mruby/mruby
Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...
CVE-2022-1427
CVE-2022-1427 affects mruby/mruby prior to 3.2. The vulnerability is an out-of-bounds read in the function mrb_obj_is_kind_of, with impact described as possible arbitrary code execution if exploited. Several connected sources corroborate the affected product/version and the severity/impact. The d...
CVE-2019-1427
creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2024-02-11 13:41:16+00:00| seen| https://t.me/ctinow/182779...
CVE-2021-1427
Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...
CVE-2021-1427
Cisco AnyConnect Secure Mobility Client for Windows is affected by DLL and executable hijacking vulnerabilities in the install, uninstall, and upgrade processes. The root cause is hijacking of DLL or executable files used by the application, enabling a local attacker with valid credentials to exe...