93 matches found
SUSE: Security Advisory (SUSE-SU-2020:1431-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1431
Cisco IOS XE SD-WAN Software vDaemon Denial of Service vulnerability (CVE-2021-1431) arises from insufficient handling of malformed packets in the vDaemon process. An unauthenticated, remote attacker can send crafted traffic to an affected device, potentially causing a reload and a DoS condition....
EulerOS Virtualization 3.0.2.6 : gd (EulerOS-SA-2021-1431)
According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash o...
CVE-2020-1431
CVE-2020-1431 is the Windows AppX Deployment Extensions Elevation of Privilege vulnerability. The issue stems from improper privilege management within AppX Deployment Extensions, enabling an authenticated attacker to elevate privileges by running a specially crafted application and potentially a...
KB4565483: Windows 10 Version 1903 and Windows 10 Version 1909 July 2020 Security Update
The remote Windows host is missing security update 4565483 or 4565554. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this...
KB4565489: Windows 10 Version 1803 July 2020 Security Update
The remote Windows host is missing security update 4565489. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability...
CVE-2019-1431
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2018-1431)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-1431
CVE-2018-1431 is a GSKit vulnerability affecting IBM Spectrum Scale components (notably GPFS-based deployments) that could allow a local attacker to gain control of the Spectrum Scale daemon and read/modify files, potentially elevating privileges. Connected IBM bulletins enumerate affected releas...
CVE-2017-1431
IBM InfoSphere Streams (versions 4.0–4.2) is vulnerable to cross-site scripting in the Web UI, allowing an attacker to execute arbitrary JavaScript in a trusted session and potentially disclose credentials. Affected: 4.0.x, 4.1.x, 4.2.x (up to 4.2.1.1 and earlier). CVSSv3 base score 5.4 (MEDIUM);...
CVE-2014-1431
CVE-2014-1431 entry rejected; not used and does not represent an active vulnerability.
GLSA-201701-25 : phpBB: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201701-25 phpBB: Multiple vulnerabilities Multiple vulnerabilities have been discovered in phpBB. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to change settings, inject...
CVE-2016-1431
Cisco Firepower Management Center is affected by CVE-2016-1431: an XSS vulnerability in the HTTP framework allows unauthenticated remote attackers to inject arbitrary web script or HTML via a crafted URL. Affected versions include FMC 4.10.3 and 5.2.0–5.4.0 (including 5.3.0/5.3.1 as listed in sou...
CVE-2015-1431
Cross-site scripting XSS vulnerability in includes/startup.php in phpBB before 3.0.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to "Relative Path Overwrite."...
CVE-2015-1431
Cross-site scripting XSS vulnerability in includes/startup.php in phpBB before 3.0.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to "Relative Path Overwrite."...
CVE-2015-1431
CVE-2015-1431 affects phpBB up to 3.0.12, with an XSS vulnerability in includes/startup.php exploitable via Relative Path Overwrite. The issue allows remote attackers to inject arbitrary script/HTML. The public details indicate the vulnerability exists in phpBB before 3.0.13 and has been addresse...
openSUSE Security Update : telepathy-gabble (openSUSE-SU-2013:1013-1)
This update of telepathy-gabble fixes a TLS bypass problem. Changes in telepathy-gabble : - Add telepathy-gabble-cve-2013-1431.patch bnc822586. This makes it respect the TLS-required flag on legacy Jabber servers. Identified as CVE-2013-1431. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
CVE-2013-1431
CVE-2013-1431 affects the Wocky submodule in telepathy-gabble (Gabble) prior to 0.16.6 and 0.17.x prior to 0.17.4 when connecting to legacy Jabber servers. The flaw allows bypassing WockyConnector:tls-required and TLS verification, enabling MITM attacks. Fixes are provided in patches and updated ...
[SECURITY] [DSA 2702-1] telepathy-gabble security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2702-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 03, 2013 http://www.debian.org/security/faq -...