CVE-2021-1504

CVE-2021-1504 affects Cisco ASA and Firepower Threat Defense (FTD) Software. The issue arises from improper input validation of HTTPS requests, allowing an unauthenticated, remote attacker to trigger a device reload and cause a DoS. Exploitation involves sending a crafted HTTPS request to a vulne...

CVE-2021-1504

creationtimestamp| type| source ---|---|--- 2021-04-29 14:20:46+00:00| seen| https://t.me/ptswarm/32...

Amazon Linux 2 : bluez (ALAS-2020-1504)

The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1504 advisory. Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation ...

IBM WebSphere Application Server 9.0.0.4 Weak Encryption (CVE-2017-1504)

The IBM WebSphere Application Server running on the remote host is version 9.0.0.4. It is, therefore, affected by a weakness in a new feature using the PasswordUtil command to enable AES password encryption. If this feature was used, passwords were not encrypted as expected, resulting in weaker...

CVE-2020-1504

CVE-2020-1504 is a remote code execution flaw in Microsoft Excel caused by improper handling of in-memory objects. The vulnerability allows arbitrary code execution in the caller’s context if a user opens a specially crafted Excel file. The NVD entry (CVSS:3.1 base score 8.8; impact high on confi...

CVE-2020-1504 Microsoft Excel Remote Code Execution Vulnerability

...

Description of the security update for Excel 2010: August 11, 2020

Description of the security update for Excel 2010: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following securit...

[SECURITY] [DSA 4732-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4732-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 21, 2020 https://www.debian.org/security/faq -...

CVE-2019-1504

...

Security Bulletin: Missing Secure HTTP Headers

Summary During internal penetration testing we identified that the IBM i2 Enterprise Insight Analysis application could be made more secure with the addition of some HTTP headers. Vulnerability Details CVEID: CVE-2018-1525 DESCRIPTION: IBM i2 Intelligent Analyis Platform could allow a remote...

Debian: Security Advisory (DLA-1504-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2017-1504)

Summary IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway

Summary IBM WebSphere Application Server is shipped as a component of IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin...

CVE-2017-1504

CVE-2017-1504 affects IBM WebSphere Application Server 9.0.0.4 when the PasswordUtil command was used to enable AES password encryption, potentially resulting in weaker than expected security. IBM security bulletins (and IBM support pages) identify this as a vulnerability in WebSphere App Server ...

CVE-2016-1504

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...

CVE-2016-1504

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...

CVE-2016-1504

The CVE-2016-1504 entry concerns the dhcpcd DHCP client before version 6.10.0. The vulnerability arises from handling of DHCP option length, enabling remote attackers to trigger an invalid read and crash (Denial of Service). Impact is described as a crash/DoS with network-originated packets; expl...

CVE-2016-1504

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...

CVE-2016-1504

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...

CentOS Update for java CESA-2016:1504 centos7

Check the version of java SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882530";...