181 matches found
CVE-2021-1488
Cisco ASA/FTD upgrade-process vulnerability (CVE-2021-1488) allows authenticated, local attackers to inject commands with root privileges due to insufficient input validation in upgrade package handling. Affected devices include ASA Software and FTD Software on Firepower 1000/2100 series. Exploit...
Amazon Linux AMI : qemu-kvm (ALAS-2021-1488)
The version of qemu-kvm installed on the remote host is prior to 1.5.3-156.26. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1488 advisory. An out-of-bound write access flaw was found in the way QEMU loads ROM contents at boot time. This flaw occurs in the...
Amazon Linux 2 : kernel (ALAS-2020-1488)
The version of kernel installed on the remote host is prior to 4.14.193-149.317. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1488 advisory. An issue has been reported in the Linux kernel's handling of raw sockets. This issue can be used locally to cause denial of...
CVE-2020-1488 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
...
CVE-2020-1488
Technical details about CVE-2020-1488 are not publicly available in the provided connected documents. The supplied materials only reiterate a Windows AppX Deployment Extensions privilege-elevation issue with a Microsoft advisory; monitor for updates.
Microsoft Windows Multiple Vulnerabilities (KB4571703)
This host is missing a critical security update according to Microsoft KB4571703 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4530714)
This host is missing a critical security update according to Microsoft KB4530714 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Multiple Vulnerabilities (KB4530715)
This host is missing a critical security update according to Microsoft KB4530715 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Multiple Vulnerabilities (KB4530734)
This host is missing a critical security update according to Microsoft KB4530734 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
CVE-2019-1488
A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender Security Feature Bypass Vulnerability'...
CVE-2019-1488
Technical details about CVE-2019-1488 are not available in the provided documents. Monitor for updates from ENISA/RH and OpenVAS references for any concrete exposures or fixes.
KB4530730: Windows 8.1 and Windows Server 2012 R2 December 2019 Security Update
The remote Windows host is missing security update 4530730 or cumulative update 4530702. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the...
KB4530684: Windows 10 Version 1903 and Windows 10 Version 1909 December 2019 Security Update
The remote Windows host is missing security update 4530684. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system...
KB4530681: Windows 10 December 2019 Security Update
The remote Windows host is missing security update 4530681. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious...
CVE-2011-1488
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent...
CVE-2011-1488
CVE-2011-1488 affects rsyslogd prior to 5.7.6. The issue is a memory leak in how log messages are logged when RepeatedMsgReduction is enabled, which a local attacker can exploit to crash the rsyslogd daemon by flooding it with a sequence of repeated messages in a short time. Publicly available co...
Oracle Linux 6 : kernel (ELSA-2019-1488)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1488 advisory. - net tcp: enforce tcpminsndmss in tcpmtuprobing Florian Westphal 1719614 CVE-2019-11479 - net tcp: add tcpminsndmss sysctl Florian Westphal 1719614...
RHEL 6 : kernel (RHSA-2019:1488)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1488 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An integer overflow flaw was found in...
Synametrics SynaMan Cross-Site Scripting Vulnerability
Synametrics SynaMan is a remote file manager from Synametrics Technologies, USA. A cross-site scripting vulnerability in Synametrics SynaMan version 4.0 build 1488 can be exploited by a remote attacker to inject arbitrary web script or HTML via the Main heading or Sub heading fields in the Partia...