115 matches found
FreeBSD : chromium -- multiple vulnerabilities (26f2123b-c6c6-11ec-b66f-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 26f2123b-c6c6-11ec-b66f-3065ec8fd3ec advisory. - Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote...
Google Chrome < 101.0.4951.41 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 101.0.4951.41. It is, therefore, affected by multiple vulnerabilities as referenced in the 202204stable-channel-update-for-desktop26 advisory. - Use after free in File Manager in Google Chrome prior to 101.0.4951.41...
CVE-2020-1496
creationtimestamp| type| source ---|---|--- 2021-10-08 16:50:48+00:00| exploited| Telegram/t56b3Q9Pzy6RNlSuP7aXlCGnrtD6ypfrASOXqro 2021-10-08 16:50:51+00:00| seen| https://t.me/anwar1213xx/979...
SUSE: Security Advisory (SUSE-SU-2014:0418-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : busybox (ALAS-2021-1496)
The version of busybox installed on the remote host is prior to 1.19.3-2.12. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1496 advisory. decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid...
CVE-2021-1496
Cisco AnyConnect Secure Mobility Client for Windows is affected by DLL and executable hijacking vulnerabilities in the install, uninstall, and upgrade processes (CVE-2021-1496). An authenticated, local attacker with valid Windows credentials could hijack DLL or executables used by the client to e...
Amazon Linux 2 : thunderbird (ALAS-2020-1496)
The version of thunderbird installed on the remote host is prior to 68.12.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1496 advisory. By holding a reference to the eval function from an about:blank window, a malicious webpage could have gained access...
CVE-2020-1496 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2020-1496
CVE-2020-1496 is a Microsoft Excel remote code execution vulnerability where the app fails to properly handle objects in memory. The issue allows an attacker to run arbitrary code in the context of the current user, with higher impact if the user has administrative rights. Exploitation requires a...
Description of the security update for Excel 2013: August 11, 2020
Description of the security update for Excel 2013: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following securit...
Description of the security update for Excel 2010: August 11, 2020
Description of the security update for Excel 2010: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following securit...
rbs.edu.kw Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1158205 Security Researcher 4NCURZE Helped patch 1496 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting rbs.edu.kw website and its...
halls-estate.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1149367 Security Researcher 4NCURZE Helped patch 1496 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting halls-estate.com website a...
tradepumps.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1145276 Security Researcher 4NCURZE Helped patch 1496 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting tradepumps.com website and...
RHEL 8 : thunderbird (RHSA-2020:1496)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1496 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 68.7.0. Security Fixes: Mozilla:...
Security Bulletin: IBM Sterling B2B Integrator has Cross Site Scripting vulnerabilities in Queue Watcher (CVE-2017-1496)
Summary IBM Sterling B2B Integrator Queue Watcher could allow a Cross Site Scripting attack Vulnerability Details CVEID: CVE-2017-1496 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod...
CVE-2012-1496
CVE-2012-1496 affects WebCalendar prior to 1.2.5. Multiple sources document local file inclusion (LFI) in WebCalendar, with OpenVAS also listing PHP code injection in WebCalendar 1.2.4. The common impact is arbitrary file read and potential code execution within the vulnerable web application con...
CVE-2019-1496
CVE-2019-1496 is rejected/not used per the initial description.
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1496)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
aauni.edu Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1019206 Security Researcher 4NCURZE Helped patch 1496 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting aauni.edu website and its...