Amazon Linux 2 : dovecot (ALAS-2020-1489)

The version of dovecot installed on the remote host is prior to 2.2.36-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1489 advisory. In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zer...

CVE-2020-1489 Windows CSC Service Elevation of Privilege Vulnerability

...

CVE-2020-1489

CVE-2020-1489 is a Windows elevation-of-privilege vulnerability in the CSC Service that arises from improper memory handling. An attacker who can execute code on the victim system could run a crafted application to elevate privileges. The root cause is memory handling in the Windows CSC Service, ...

Microsoft Windows Multiple Vulnerabilities (KB4571703)

This host is missing a critical security update according to Microsoft KB4571703 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4571729)

This host is missing a critical security update according to Microsoft KB4571729 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : thunderbird (RHSA-2020:1489)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1489 advisory. - Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after- free. We are aware of targeted attacks in t...

Oracle Linux 7 : thunderbird (ELSA-2020-1489)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1489 advisory. 68.7.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.7.0-1 - Update to 68.7.0 build1 Tenable has...

CVE-2019-1489

CVE-2019-1489 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP). Public sources describe memory handling faults that can allow an attacker to obtain sensitive information by remote connection and running a crafted application. The advisory/tracking entries note a...

CVE-2011-1489

creationtimestamp| type| source ---|---|--- 2019-11-20 20:26:18+00:00| seen| https://t.me/cibsecurity/8232 2024-02-14 09:26:48+00:00| seen| https://t.me/ctinow/184494...

CVE-2011-1489

CVE-2011-1489 concerns rsyslog before 5.7.6. The connected documents consistently describe a memory leak in the daemon’s handling of log messages when multiple rulesets are used, causing a local denial of service by logging a message associated with more than one ruleset. The affected component i...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Security Bulletin: IBM Security Access Manager is affected by a redirect vulnerability (CVE-2017-1489)

Summary IBM Security Access Manager has addressed a possible redirect vulnerability in IBM Security Access Manager e-community configurations. Vulnerability Details CVEID: CVE-2017-1489 DESCRIPTION: IBM Security Access Manager e-community configurations may be affected by a redirect vulnerability...

CVE-2017-1489

CVE-2017-1489 affects IBM Security Access Manager (ISM) across multiple releases, specifically e-community configurations in ISM versions 6.1, 7.0, 8.0, and 9.0. The root issue is a redirect vulnerability where ECSSO Master Authentication can redirect to a server not participating in the e-commun...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:1489-1)

This update for ImageMagick fixes the following issues: Security issues fixed : - CVE-2017-6502: Possible file-descriptor leak in libmagickcore that could be triggered via a specially crafted webp file bsc1028075. - CVE-2017-7943: The ReadSVGImage function in svg.c allowed remote attackers to...

Oh Snap! Lenovo protects your Security with '12345678' as Hard-Coded Password in SHAREit

What do you expect a tech giant to protect your backdoor security with? Holy Cow! It's "12345678" as a Hard-Coded Password. Yes, Lenovo was using one of the most obvious, awful passwords of all time as a hard-coded password in its file sharing software SHAREit that could be exploited by anyone wh...

Lenovo ShareIT Multiple Vulnerabilities

Advisory ID Internal CORE-2016-0002 1. Advisory Information Title: Lenovo ShareIT Multiple Vulnerabilities Advisory ID: CORE-2016-0002 Date published: 2016-01-25 Date of last update: 2016-01-22 Vendors contacted: Lenovo Release mode: Coordinated release 2. Vulnerability Information Class: Use of...

SUSE: Security Advisory for Mozilla (SUSE-SU-2014:0248-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2014:0248-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1489

creationtimestamp| type| source ---|---|--- 2015-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37812 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sepmauthbypassrce.rb 2025-02-06 03:13:42+00:00| see...

Symantec Endpoint Protection Manager - Authentication Bypass / Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Symantec Endpoint Protection Manager Authentication Bypass and Code Execution', 'Description' = %q This module exploits three separa...