128 matches found
MiracleLinux 3 : firefox-24.4.0-1.0.1.AXS3 (AXSA:2014-233:01)
The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-233:01 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...
EUVD-2026-1497
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. The JavaScript is executed whenever another user views the Action History Log. Fixed in OPEXUS eCASE Platform 11.14.1.0...
CVE-2025-1497
A vulnerability, that could result in Remote Code Execution RCE, has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code. Vendor commented out vulnerable line, further usage of the software requires uncommenting it and thus accepting t...
CVE-2025-1497 Remote Code Execution in PlotAI
A vulnerability, that could result in Remote Code Execution RCE, has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code. Vendor commented out vulnerable line, further usage of the software requires uncommenting it and thus accepting t...
CVE-2025-1497
PlotAI contains a vulnerability (CVE-2025-1497) where lack of validation of LLM-generated output can allow an attacker to execute arbitrary Python code (RCE). The issue affects PlotAI as described in multiple sources; the vendor has commented out the vulnerable line and states that further use re...
openSUSE Security Advisory (SUSE-SU-2024:1497-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : skopeo (SUSE-SU-2024:1497-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1497-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
CVE-2024-1497
The CVE-2024-1497 entry concerns the Orbit Fox by ThemeIsle WordPress plugin. A Stored Cross-Site Scripting (XSS) vulnerability exists in the addr2_width attribute of the form widget, across all versions up to and including 2.10.30, caused by insufficient input sanitization and output escaping. E...
CVE-2023-1497
The CVE-2023-1497 entry affects SourceCodester Simple and Nice Shopping Cart Script 1.0, specifically the file uploaderm.php handling. Connected documentation confirms a vulnerability where manipulating the submit parameter allows unrestricted file uploads, enabling remote initiation. Multiple so...
Joint Advisory AA22-279A and Vulristics
Hello everyone! This episode will be about the new hot twenty vulnerabilities from CISA, NSA and FBI, Joint cybersecurity advisory CSA AA22-279A, and how I analyzed these vulnerabilities using my open source project Vulristics. Alternative video link for Russia: Americans cant just release a list...
CVE-2022-1497
creationtimestamp| type| source ---|---|--- 2022-07-27 02:35:43+00:00| seen| https://t.me/cibsecurity/47029...
CVE-2022-1497
Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origin websites via a crafted HTML page...
UBUNTU-CVE-2022-1497
Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origin websites via a crafted HTML page...
CVE-2022-1497
Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origin websites via a crafted HTML page...
CVE-2022-1497
CVE-2022-1497 affects Google Chrome (Chromium base) with an Inappropriate implementation in Input that allowed a remote attacker to spoof the contents of cross-origin websites via a crafted HTML page. The connected sources consistently describe this issue in Chrome/Chromium prior to version 101.0...
Cisco HyperFlex HX Command Injection (CVE-2021-1497)
A command injection vulnerability exists in Cisco HyperFlex HX. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CVE-2022-1497
No description is available for this CVE...
Mageia: Security Advisory (MGASA-2022-0158)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Chromium: CVE-2022-1497 Inappropriate implementation in Input
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2011-1497
creationtimestamp| type| source ---|---|--- 2021-10-19 18:33:35+00:00| seen| https://t.me/cibsecurity/30799...