115 matches found
CVE-2022-1616
Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...
CVE-2022-1616
CVE-2022-1616 affects Vim/Vim in versions prior to 8.2.4895. The issue is a use-after-free in the function append_command in the vim/vim GitHub repository, which can crash the application, bypass protection mechanisms, modify memory, and potentially enable remote code execution. The advisory note...
CVE-2022-1616 Use after free in append_command in vim/vim
Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...
AlmaLinux 8 : irssi (ALSA-2020:1616)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:1616 advisory. - Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server. CVE-2019-13045...
CVE-2021-1616
Cisco IOS XE Software CVE-2021-1616 describes a bypass vulnerability in the H.323 ALG used by NAT, caused by insufficient data validation of traversing traffic. An unauthenticated remote attacker could exploit crafted traffic to bypass the ALG and open connections that should be blocked behind th...
Amazon Linux 2 : kernel (ALAS-2021-1616)
The version of kernel installed on the remote host is prior to 4.14.225-168.357. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1616 advisory. An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-1616)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1616
Due to insufficient server-side login attempt limit enforcement, a vulnerability in the SSH login service of Juniper Networks Juniper Advanced Threat Prevention JATP Series and Virtual JATP vJATP devices allows an unauthenticated, remote attacker to perform multiple login attempts in excess of th...
CVE-2020-1616
Juniper Networks JATP and vJATP devices are affected by a vulnerability in the SSH login service due to insufficient server-side login attempt limit enforcement. An unauthenticated, remote attacker can perform multiple login attempts beyond the configured limit, enabling brute-force password atta...
CVE-2020-1616 JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service.
Due to insufficient server-side login attempt limit enforcement, a vulnerability in the SSH login service of Juniper Networks Juniper Advanced Threat Prevention JATP Series and Virtual JATP vJATP devices allows an unauthenticated, remote attacker to perform multiple login attempts in excess of th...
Siemens CP 1616 6GK1161-6AA02 Communications processor
Binary data 764359.prm...
Siemens CP 1604 and 1616 <= v2.8 Cross-Site Request Forgery
Binary data 720259.prm...
Siemens CP 1604 and 1616 <= v2.8 Cleartext Transmission of Sensitive Information
Binary data 720257.prm...
Siemens CP 1604 and 1616 <= v2.8 Improper Neutralization of Input during Web Page Generation
Binary data 720258.prm...
Siemens CP 1616 Communications Adapter Detection
Binary data 762015.prm...
Siemens Multiple Devices Profinet DCP Denial of Service
Binary data 720111.prm...
Siemens CP 1616 Communications Adapter Detection
Binary data 762014.prm...
Siemens CP 1616 Communications Adapter Detection
Binary data 762013.prm...
Siemens Multiple Devices Profinet DCP Denial of Service
Binary data 720110.prm...
CVE-2018-13810
A vulnerability has been identified in CP 1604 All versions, CP 1616 All versions. The integrated configuration web server of the affected CP devices could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation...