72 matches found
CVE-2022-1589
CVE-2022-1589 affects the WordPress plugin “Change wp-admin login” prior to version 1.1.0. The issue arises from insufficient authorization checks and missing CSRF protection when updating settings, enabling unauthenticated users to modify settings via CSRF vectors. Documented impact is unauthent...
CVE-2022-1589 Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings Update
The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CSRF check when updating its settings, which could allow unauthenticated users to change the settings. The attacked could also be performed via a CSRF vector...
RHEL 8 : kernel (RHSA-2022:1589)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1589 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: remote stack overflow via kernel panic ...
CVE-2021-1589
creationtimestamp| type| source ---|---|--- 2021-09-23 07:29:41+00:00| seen| https://t.me/cibsecurity/29267...
CVE-2021-1589
Cisco SD-WAN vManage Software disaster recovery feature exposes credentials due to insufficient access restrictions on API endpoints. Multiple connected sources (NVD, CVE-List, Cisco advisory) confirm an authenticated, remote attacker could access administrative credentials by sending requests to...
CVE-2021-1589 Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability
A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to user credentials. This vulnerability exists because access to API endpoints is not properly restricted. An attacker could exploit this...
Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure (cisco-sa-sd-wan-credentials-ydYfskzZ)
According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to user credentials. This vulnerabili...
Amazon Linux 2 : python-rtslib (ALAS-2021-1589)
The version of python-rtslib installed on the remote host is prior to 2.1.74-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1589 advisory. A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for...
CVE-2001-1589
CVE-2001-1589 entry is rejected/not used per the initial description.
CVE-2020-1589
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on ...
CVE-2020-1589 Windows Kernel Information Disclosure Vulnerability
...
CVE-2020-1589
Technical details of CVE-2020-1589 are not publicly provided in the supplied documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2020-1589 Windows Kernel Information Disclosure Vulnerability
...
CVE-2016-1589
This CVE entry is rejected/not used and does not represent an active vulnerability.
Drupal 7.x < 7.13 Multiple Vulnerabilities
Binary data 9724.prm...
CVE-2015-1589
Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. dot dot in a CHM file...
CVE-2015-1589
The CVE-2015-1589 entry concerns arCHMage 0.2.4, a CHM file reader/decompiler. A directory traversal vulnerability in CHM processing allows remote attackers to write to arbitrary files by exploiting a .. path in a CHM file. Connected sources consistently identify arCHMage 0.2.4 as the affected co...
