65 matches found
RHEL 8 : libreoffice (RHSA-2020:1598)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1598 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor...
CVE-1999-1598
CVE-1999-1598 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2020-1598 Windows UPnP Service Elevation of Privilege Vulnerability
...
CVE-2020-1598
Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.
CVE-2013-1598
Vivotek PT7135 IP cameras with firmware 0300a and 0400a are affected by CVE-2013-1598, an OS command injection in the binary farseer.out via the system.ntp parameter that lets an attacker execute arbitrary commands. The vulnerability spans pre-auth (0300a) and post-auth (0400a) access in the admi...
CVE-2014-1598
The CVE-2014-1598 entry concerns the CenturyStar 7.12 ActiveX Control and is documented as a Stack Buffer Overflow vulnerability. The connected sources confirm the affected component (CenturyStar 7.12 ActiveX Control) and describe the root cause as a stack-based overflow. According to the NVD ent...
CVE-2014-1598
centurystar 7.12 ActiveX Control has a Stack Buffer Overflow...
CVE-2019-1598
CVE-2019-1598 describes multiple LDAP parsing vulnerabilities in Cisco FXOS/NX-OS that allow an unauthenticated attacker to trigger a device reload and DoS by sending a BER-formatted LDAP packet from a configured LDAP source. Affected products/families and pre-patch versions (Cisco FXOS: <2.0....
CVE-2019-1598
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...
CVE-2017-1598
IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 132611...
CVE-2017-1598
IBM Security Guardium Database Activity Monitor (V10.0–10.1.3) is affected by use of weaker cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Root cause: cryptographic weakness in the product’s crypto implementation. Impact: potential confidentiality b...
CVE-2016-1598
XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages...
CVE-2016-1598
Affected software: NetIQ Identity Manager IDM 4.5 Identity Applications, prior to version 4.5.4. Vulnerability: Cross-site scripting (XSS) via the username field that allows an attacker to inject arbitrary HTML into the Role Assignment administrator HTML pages. Root cause (as described): the prog...
Oracle: Security Advisory (ELSA-2011-2019)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2011-0836)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1598
The CVE-2015-1598 entry corresponds to the Siemens SPCanywhere mobile app where passwords are stored in a recoverable format, enabling physically proximate attackers with access to the device to obtain credentials. Public documents describe this as a local information-disclosure weakness (unprote...
CVE-2003-1598
CVE-2003-1598 describes a SQL injection in WordPress 0.7 and earlier, caused by the vulnerable code in log.header.php that processes the posts variable. The flaw permits remote attackers to craft SQL commands, potentially compromising data integrity and confidentiality with network access and no ...
CVE-2003-1598
SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable...
Adobe Reader 'SWF' Information Disclosure Vulnerability - Windows
Adobe Reader is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...