Microsoft Windows Multiple Vulnerabilities (KB4530734)

This host is missing a critical security update according to Microsoft KB4530734 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4530714)

This host is missing a critical security update according to Microsoft KB4530714 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-1470

CVE-2019-1470 is described as an information-disclosure vulnerability in Windows Hyper-V where a host OS fails to properly validate input from an authenticated user on a guest OS. The linked Red Hat advisory repeats this description. The connected documents do not provide specific affected versio...

KB4530684: Windows 10 Version 1903 and Windows 10 Version 1909 December 2019 Security Update

The remote Windows host is missing security update 4530684. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system...

KB4530730: Windows 8.1 and Windows Server 2012 R2 December 2019 Security Update

The remote Windows host is missing security update 4530730 or cumulative update 4530702. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the...

KB4530681: Windows 10 December 2019 Security Update

The remote Windows host is missing security update 4530681. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious...

Debian: Security Advisory (DLA-1470-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1470

CVE-2018-1470 affects IBM Sterling File Gateway 2.2.0–2.2.6. The core issue is an information disclosure vulnerability where a remote authenticated attacker could obtain sensitive data displayed in the URL, enabling potential follow-on attacks. Documents from IBM (Security Bulletin) and mirrored ...

Cylance CylancePROTECT Privilege Extraction Vulnerability

Cylance CylancePROTECT is a suite of endpoint security protection software from Cylance USA. The software is capable of preventing ransomware, malware, and other attacks. A security vulnerability exists in Cylance CylancePROTECT versions prior to 1470, which stems from a user having...

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

F5 Networks BIG-IP : XSS vulnerability in the BIG-IP and Enterprise Manager Configuration utilities (K16838)

Using the BIGIPAuthUsernameCookie value with /tmui/login.jsp can expose a cross-site scripting XSS security flaw. CVE-2015-1470 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution K16838. The text description of...

SOL16838 - XSS vulnerability in the BIG-IP and Enterprise Manager Configuration utilities CVE-2015-1470

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

CVE-2016-1470

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

CVE-2016-1470

CVE-2016-1470 describes a cross-site request forgery (CSRF) in the web-based management interface of Cisco Small Business 220 Series Smart Plus Switches. Affected devices run firmware prior to 1.0.1.1. The root cause is insufficient CSRF protections, allowing an unauthenticated or remote attacker...

Oracle: Security Advisory (ELSA-2009-1470)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

elcomercio.pe XSS vulnerability

Vulnerable URL: http://elcomercio.pe/buscar/R/B4rt%253C%252Fscript%253E%253c%252573%252576%252567%25252F%25256F%25256E%25256C%25256F%252561%252564%25253D%252561%25256C%252565%252572%252574%252528%25252F%252558%252553%252553%252550%25254F%252553%252545%252544%25252F%252529%25253E Details:...

elcomercio.pe XSS vulnerability

Vulnerable URL: http://elcomercio.pe/buscar/U/B4rt%253C%252Fscript%253E%253c%252573%252576%252567%25252F%25256F%25256E%25256C%25256F%252561%252564%25253D%252561%25256C%252565%252572%252574%252528%25252F%252558%252553%252553%252550%25254F%252553%252545%252544%25252F%252529%25253E Details:...

elcomercio.pe XSS vulnerability

Vulnerable URL: http://elcomercio.pe/buscar/T/B4rt%253C%252Fscript%253E%253c%252573%252576%252567%25252F%25256F%25256E%25256C%25256F%252561%252564%25253D%252561%25256C%252565%252572%252574%252528%25252F%252558%252553%252553%252550%25254F%252553%252545%252544%25252F%252529%25253E Details:...

elcomercio.pe XSS vulnerability

Vulnerable URL: http://elcomercio.pe/buscar/M/B4rt%253C%252Fscript%253E%253c%252573%252576%252567%25252F%25256F%25256E%25256C%25256F%252561%252564%25253D%252561%25256C%252565%252572%252574%252528%25252F%252558%252553%252553%252550%25254F%252553%252545%252544%25252F%252529%25253E Details:...

elcomercio.pe XSS vulnerability

Vulnerable URL: http://elcomercio.pe/buscar/h/B4rt%253C%252Fscript%253E%253c%252573%252576%252567%25252F%25256F%25256E%25256C%25256F%252561%252564%25253D%252561%25256C%252565%252572%252574%252528%25252F%252558%252553%252553%252550%25254F%252553%252545%252544%25252F%252529%25253E Details:...