118 matches found
HPESBHF04739 rev.1- Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01101, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability
Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Storage - Prior to v2.3008-09-2024 HPE StoreEasy 1470 Performance - Prior to v2.3008-09-2024 HPE StoreEasy 1570 Storage - Prior to v2.3008-09-2024 HPE StoreEa...
HPESBHF04706 rev.2 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01103, 2024.3 IPU - Intel Processor RAPL Interface Advisory, Local Disclosure of Information Vulnerability
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to v2.2008-07-2024 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to v2.2008-07-2024 U46 ROM Family HPE StoreEasy 1670 Expanded Storage...
openSUSE Security Advisory (SUSE-SU-2024:1470-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-1470
creationtimestamp| type| source ---|---|--- 2024-03-09 14:46:25+00:00| seen| https://t.me/ctinow/203952...
CVE-2024-1470
creationtimestamp| type| source ---|---|--- 2024-03-08 16:21:36+00:00| seen| https://t.me/ctinow/203416 2025-02-14 21:09:17+00:00| seen| Telegram/sYZgDZyr7gpS7l06eKsT80JJY3lu91t471KX0oYI12AWI...
CVE-2024-1470
Authorization Bypass Through User-Controlled Key vulnerability in NetIQ OpenText Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6...
CVE-2024-1470
CVE-2024-1470 pertains to NetIQ (OpenText) Client Login Extension on Windows, version 4.6, with an "Authorization Bypass Through User-Controlled Key" that leads to privilege escalation and code injection. Multiple connected sources corroborate the affected product/version and the underlying issue...
CVE-2024-1470 Elevation of Privilege attack on NetIQ Client login extension
Authorization Bypass Through User-Controlled Key vulnerability in NetIQ OpenText Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6...
CVE-2024-1470 Elevation of Privilege attack on NetIQ Client login extension
Authorization Bypass Through User-Controlled Key vulnerability in NetIQ OpenText Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6...
WordPress eCommerce Product Catalog Plugin <= 3.3.8 is vulnerable to Cross Site Scripting (XSS)
Software eCommerce Product Catalog Type Plugin Vulnerable versions = 3.3.8 Fixed in 3.3.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1470 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b594574ee607 Credits Marco Wotschka...
CVE-2023-1470 eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 3.3.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
K16838: XSS vulnerability in the BIG-IP and Enterprise Manager Configuration utilities CVE-2015-1470
Security Advisory Description Using the BIGIPAuthUsernameCookie value with/tmui/login.jsp can expose a cross-site scripting XSS security flaw. CVE-2015-1470 Impact Some login.jsp parameters may allow an attacker to bypass XSS protection mechanisms by using a crafted cookie. Security Advisory Stat...
SUSE CVE-2006-1470
OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service crash via an invalid LDAP request that triggers an assert error...
CVE-2022-1470
Vulnerability summary: CVE-2022-1470 affects the WordPress plugin Ultimate WooCommerce CSV Importer (versions up to 2.0). The root cause is failure to sanitize and escape imported data before rendering it on the page, producing a Reflected Cross-Site Scripting vulnerability. Affected software: Wo...
Amazon Linux AMI : tigervnc (ALAS-2021-1470)
The version of tigervnc installed on the remote host is prior to 1.8.0-21.34. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1470 advisory. TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack...
Amazon Linux AMI : tigervnc (ALAS-2020-1470) (deprecated)
The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1470 advisory. - TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usa...
RHEL 7 : ntp (RHSA-2020:1470)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1470 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. These packages include the ntpd service...
CVE-2020-1470 Windows Work Folders Service Elevation of Privilege Vulnerability
...
Microsoft Windows Multiple Vulnerabilities (KB4571729)
This host is missing a critical security update according to Microsoft KB4571729 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4571703)
This host is missing a critical security update according to Microsoft KB4571703 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...