136 matches found
AlmaLinux 8 : iperf3 (ALSA-2026:1592)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:1592 advisory. iperf3: iperf Heap Buffer Overflow CVE-2025-54349 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...
Oracle Linux 8 : iperf3 (ELSA-2026-1592)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-1592 advisory. 3.5-12 - Resolves: RHEL-136175 - iperf Heap Buffer Overflow CVE-2025-54349 Tenable has extracted the preceding description block directly from the Oracle Linux...
CVE-2025-1592
A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...
CVE-2010-1592
sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving "Model-Specific Registers."...
CVE-2025-1592
creationtimestamp| type| source ---|---|--- 2025-02-23 20:22:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5102 2025-02-23 23:33:50+00:00| seen| https://t.me/cvedetector/18757 2025-02-24 14:08:41+00:00| seen| Telegram/KsxqLYCehQwoWvTV0ldpYTxeNjOBPKEoBT-qIUur736QLCP...
CVE-2025-1592
A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...
CVE-2025-1592 SourceCodester Best Employee Management System Add Role Page Role.php cross site scripting
A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...
CVE-2025-1592 SourceCodester Best Employee Management System Add Role Page Role.php cross site scripting
A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...
CVE-2025-1592
Summary: CVE-2025-1592 affects SourceCodester Best Employee Management System 1.0, specifically the Add Role Page’s /admin/Operations/Role.php. The issue arises from manipulating the assign_name/description parameters, causing cross-site scripting that can be triggered remotely. The primary sourc...
CVE-2022-1592
Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...
SUSE: Security Advisory (SUSE-SU-2024:1592-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2024:1592-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Complianz – GDPR/CCPA Cookie Consent Plugin <= 6.5.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software Complianz – GDPR/CCPA Cookie Consent Type Plugin Vulnerable versions = 6.5.6 Fixed in 7.0.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-1592 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 58711ad23413 Credits...
CVE-2024-1592 Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion
The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.5.6. This is due to missing or incorrect nonce validation on the processdelete function in class-DNSMPD.php. This makes it possible for unauthenticated...
aecwb.edu.in Cross Site Scripting vulnerability OBB-3287952
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Rocky Linux 9 : tigervnc (RLSA-2023:1592)
The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:1592 advisory. - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overla...
RHEL 9 : tigervnc (RHSA-2023:1592)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1592 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...
Oracle Linux 9 : tigervnc (ELSA-2023-1592)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1592 advisory. 1.12.0-5.2 - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz2180308 Tenable has extracted the...
CVE-2023-1592
creationtimestamp| type| source ---|---|--- 2023-03-23 13:49:41+00:00| seen| https://t.me/cibsecurity/60551...
CVE-2018-1592
CVE-2018-1592 (IBM Multi-Cloud Data Encryption, MDE) is an information-exposure vulnerability caused by storing sensitive data in URL parameters. The IBM reports show affected MDE versions: 2.1-2.1.0.1 and 2.1-2.1.0.2, with remediation available via upgrade to 2.1.0.2 (for 2.1 line) or to 2.2.0.0...