77 matches found
RHCOS 4 : Red Hat build of MicroShift 4.14.19 (RHSA-2024:1566)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1566 advisory. - golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Note that Nessus has not tested for this iss...
Amazon Linux 2023 : cargo-c (ALAS2023-2026-1566)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1566 advisory. tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As par...
EUVD-2026-1566
When doing TLS related transfers with reused easy or multi handles and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcur...
CVE-2023-1566
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...
CVE-2025-1566
DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions...
CVE-2025-1566
creationtimestamp| type| source ---|---|--- 2025-04-16 23:58:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12173 2025-04-17 02:06:31+00:00| seen| https://t.me/cvedetector/23196 2025-04-17 02:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rxagaa2b...
RHSA-2024:1566
creationtimestamp| type| source ---|---|--- 2025-01-13 09:11:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1356 2025-05-12 23:29:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16071...
CVE-2024-1566
creationtimestamp| type| source ---|---|--- 2024-03-14 20:32:13+00:00| seen| https://t.me/ctinow/208125...
CVE-2024-1566 Redirects <= 1.2.1 - Missing Authorization via save
The Redirects plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save function in all versions up to, and including, 1.2.1. This makes it possible for unauthenticated attackers to change redirects created with this plugin. This could...
CVE-2024-1566
The PatchSTACK entry confirms a concrete vulnerability in the WordPress Redirects plugin (versions up to and including 1.2.1). Root cause: missing capability check on the save function. Impact: unauthenticated attackers can modify redirects created with this plugin, enabling undesired redirection...
Rocky Linux 8 : container-tools:2.0 (RLSA-2022:1566)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1566 advisory. - A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby Docker...
Rocky Linux 8 : kernel (RLSA-2023:1566)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:1566 advisory. - A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress usi...
RHEL 8 : kernel (RHSA-2023:1566)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1566 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: stack overflow in doprocdointv...
CVE-2023-1566
The CVE-2023-1566 entry concerns SourceCodester Medical Certificate Generator App 1.0. The vulnerability is a SQL injection in the action.php file, triggered by manipulating the id parameter. It is exploitable remotely and has public exploit exposure (VDB-223558). Multiple connected sources corro...
CVE-2022-1566
creationtimestamp| type| source ---|---|--- 2022-05-30 12:17:46+00:00| seen| https://t.me/cibsecurity/43530...
CVE-2022-1566
The Quotes llama WordPress plugin (pre-1.0.0) is vulnerable due to lack of sanitisation/escaping of quotes, enabling stored Cross-Site Scripting by high-privilege admins (e.g., via regular input or CSV import). Impact is client-side script execution within admin/affected pages; remediation provid...
CVE-2022-1566 Quotes llama < 1.0.0 - Admin+ Stored Cross-Site Scripting
The Quotes llama WordPress plugin before 1.0.0 does not sanitise and escape Quotes, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed. The attack could also be performed by tricking an admin to import a malicious CS...
Oracle Linux 8 : container-tools:2.0 (ELSA-2022-1566)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1566 advisory. - fixes CVE-2022-27649 podman - fixes CVE-2022-27651 Tenable has extracted the preceding description block directly from the Oracle Linux security...
CentOS 8 : container-tools:2.0 (CESA-2022:1566)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1566 advisory. - podman: Default inheritable capabilities for linux container should be empty CVE-2022-27649 - buildah: Default inheritable capabilities for linux...
Amazon Linux AMI : perl-Image-ExifTool (ALAS-2022-1566)
The version of perl-Image-ExifTool installed on the remote host is prior to 12.38-1.3. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1566 advisory. lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check. CVE-2022-23935 Tenable has extracted...