104 matches found
CVE-2023-1445
CVE-2023-1445 affects Filseclab Twister Antivirus 8. The vulnerability lies in the IoControlCode Handler of the library fildds.sys, specifically function 0x80112053, where manipulation leads to a denial of service. The attack is local, with the exploit disclosed publicly. PT Security notes a temp...
CVE-2022-1445
creationtimestamp| type| source ---|---|--- 2022-04-25 12:18:47+00:00| seen| https://t.me/cibsecurity/41366...
CVE-2022-1445
Snipe-IT (open source IT asset/license management) is affected by CVE-2022-1445: a stored XSS vulnerability in the checked_out_to parameter, caused by unescaped input, allowing an attacker to steal user cookies. It impacts versions before 5.4.3. remediation is to upgrade to 5.4.3 or apply the pro...
CVE-2022-1445 Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it
Stored Cross Site Scripting vulnerability in the checkedoutto parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie...
Oracle Linux 8 : java-17-openjdk (ELSA-2022-1445)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1445 advisory. - JDK-8275082 should be listed as also resolving JDK-8278008 & CVE-2022-21476 Tenable has extracted the preceding description block directly from the...
RHEL 8 : java-17-openjdk (RHSA-2022:1445)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1445 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixe...
Mageia: Security Advisory (MGASA-2013-0319)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:0912-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1445
Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...
CVE-2021-1445
Cisco ASA/FTD Web Services VPN DoS vulnerabilities stem from improper input validation of HTTPS requests. An unauthenticated, remote attacker can exploit this by sending a crafted HTTPS request to an affected device, potentially causing a reload and a DoS condition. Affected products include Cisc...
CVE-2021-1445
creationtimestamp| type| source ---|---|--- 2021-04-29 14:20:46+00:00| seen| https://t.me/ptswarm/32...
Microsoft Office Multiple Vulnerabilities (Jul 2020) - Mac OS X
This host is missing an important security update for Microsoft Office 2016 and Office 2019 on Mac OS X according to Microsoft security updates July 2020 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Information disclosure
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445...
CVE-2020-1445
CVE-2020-1445 is an information disclosure vulnerability in Microsoft Office (notably Word) related to how memory contents are disclosed. The initial description specifies memory disclosure without providing exploit specifics. Connected Nessus entries for Word/Office July 2020 corroborate that CV...
Description of the security update for SharePoint Server 2010: July 14, 2020
Description of the security update for SharePoint Server 2010: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the followi...
Description of the security update for Word 2013: July 14, 2020
Description of the security update for Word 2013: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following Microsoft...
VLC Media Player < 1.0.6 Multiple Vulnerabilities
The version of VLC media player installed on the remote Windows host is prior to 1.0.6. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in VideoLAN VLC media player before 1.0.6 due to heap-based buffer overflow. An unauthenticated, remote...
Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2019-1445)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-1445
The vulnerability CVE-2019-1445 affects Microsoft Office Online/Office Online Server, resulting from improper validation of the origin in cross-origin communication handlers. This root cause enables spoofing via cross-origin requests when Office Online handles cross-domain messages. Evidence from...