CVE-2022-1464

creationtimestamp| type| source ---|---|--- 2022-05-05 18:36:31+00:00| seen| https://t.me/cibsecurity/41992...

CVE-2022-1464 Stored xss bug in gogs/gogs

Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account...

CVE-2022-1464

CVE-2022-1464 concerns a stored XSS in Gogs (Go Git Service) prior to version 0.12.7. The vulnerability arises when users upload or view report attachments in a public repository; opening an attachment can execute arbitrary JavaScript in the victim’s account. Public notes indicate the issue is tr...

FreeBSD : gogs -- XSS in issue attachments (647ac600-cc70-11ec-9cfc-10c37b4ac2ea)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 647ac600-cc70-11ec-9cfc-10c37b4ac2ea advisory. - The gogs project reports: Repository issues page allows HTML attachments with arbitrary JS code...

CVE-2017-1464

IBM TRIRIGA is affected by CVE-2017-1464 due to the failure to enable HTTP Strict Transport Security (HSTS), enabling a remote attacker to obtain sensitive information via man-in-the-middle techniques. Affected IBM TRIRIGA Platform versions include 3.5.0–3.5.3.0, 3.4.0–3.4.2.5, and 3.3.0–3.3.2.5....

Amazon Linux AMI : mysql56 (ALAS-2021-1464)

The version of mysql56 installed on the remote host is prior to 5.6.50-1.38. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1464 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that...

RHEL 7 : procps-ng (RHSA-2020:1464)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1464 advisory. The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top,...

CVE-2020-1464

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent...

CVE-2020-1464

CVE-2020-1464 is a Windows spoofing vulnerability where improper validation of code-signing signatures allows bypassing security features and loading improperly signed files. It affects Windows and was actively exploited in the wild, per reports linked to the August 2020 Patch Tuesday. The core i...

CVE-2020-1464 Windows Spoofing Vulnerability

...

CVE-2020-1464 Windows Spoofing Vulnerability

...

CVE-2020-1464

creationtimestamp| type| source ---|---|--- 2020-08-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=499 2020-08-12 11:34:34+00:00| exploited| https://t.me/truesecator/839 2020-08-18 01:01:58+00:00| exploited| https://t.me/SecLabNews/8418 2020-08-20 10:35:11+00:00|...

Microsoft Windows Multiple Vulnerabilities (KB4571729)

This host is missing a critical security update according to Microsoft KB4571729 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4571703)

This host is missing a critical security update according to Microsoft KB4571703 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : gd (EulerOS-SA-2020-1464)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via...

Microsoft Office 2016 Information Disclosure Vulnerability (KB4484182)

This host is missing an important security update according to Microsoft KB4484182 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2010 Service Pack 2 Information Disclosure Vulnerability (KB4484196)

This host is missing an important security update according to Microsoft KB4484196 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office Multiple Vulnerabilities (Dec 2019) - Mac OS X

This host is missing a critical security update for Microsoft Office 2016 and Office 2019 on Mac OS X according to Microsoft security update December 2019 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft Office 2010 Service Pack 2 Information Disclosure Vulnerability (KB4484192)

This host is missing an important security update according to Microsoft KB4484192 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Security Updates for Microsoft Office Products (November 2019) (macOS)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects ...