CVE-2022-1644 Call&Book Mobile Bar <= 1.2.2 - Admin+ Stored Cross Site Scripting

The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

RHEL 8 : xmlrpc-c (RHSA-2022:1644)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1644 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

Amazon Linux 2 : thunderbird (ALAS-2021-1644)

The version of thunderbird installed on the remote host is prior to 78.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1644 advisory. Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both a...

CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2020:1644)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1644 advisory. - jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig CVE-2019-14540 - jackson-databind: Serialization gadgets in...

CVE-2021-1644

creationtimestamp| type| source ---|---|--- 2021-01-12 22:58:08+00:00| seen| https://t.me/cibsecurity/22016...

CVE-2021-1644

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2021-1644 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2021-1644

CVE-2021-1644 is a remote code execution vulnerability in the Windows HEVC Video Extensions (HEVC Video Extensions/HEVC from Device Manufacturer). The issue is attributed to insufficient input validation in the HEVC codec, allowing a crafted video file to cause arbitrary code execution on a vulne...

Microsoft Windows Codecs Library Multiple Vulnerabilities (January 2021)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by multiple remote code execution vulnerabilities: - A remote code execution vulnerability exists in the Microsoft Windows Codecs Library HEVC Extension. An attacker who successfull...

1644-7485.com Cross Site Scripting vulnerability OBB-1272389

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Juniper Junos RPD Crash DoS (JSA11032)

The version of Junos OS installed on the remote host is prior to 17.2X75-D105.19, 17.3R3-S8, 17.4R2-S10, 18.1R3-S10, 18.2R2-S7, 18.2X75-D13, 18.3R2-S4, 18.4R1-S7, 19.1R1-S5, 19.2R1-S5, 19.3R2-S2, or 19.4R1-S2. It is, therefore, affected by a denial of service vulnerability DoS as referenced in th...

CVE-2020-1644

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

CVE-2020-1644

CVE-2020-1644 affects Juniper Networks Junos OS and Junos OS Evolved. A specific BGP UPDATE packet can increment an internal counter incorrectly, leading to the Routing Protocols Daemon (RPD) crash and restart for both IBGP and EBGP multihop in IPv4/IPv6. Affected software ranges include Junos OS...

RHEL 8 : pki-core:10.6 and pki-deps:10.6 (RHSA-2020:1644)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1644 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: jackson-databin...

Huawei EulerOS: Security Advisory for dovecot (EulerOS-SA-2019-1644)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1644-1 : policykit-1 security update

Two vulnerabilities were found in Policykit, a framework for managing administrative policies and privileges : CVE-2018-19788 It was discovered that incorrect processing of very high UIDs in Policykit could result in authentication bypass. CVE-2019-6133 Jann Horn of Google found that Policykit...

CVE-2019-1644

CVE-2019-1644 affects Cisco IoT Field Network Director (IoT-FND). The issue is a resource-management error in the UDP ingress path that lets an unauthenticated, remote attacker send a high rate of UDP packets to exhaust system resources, causing a DoS. Affected component is the UDP protocol handl...

CVE-2018-1644

Technical details about CVE-2018-1644 (affected IBM WebSphere Commerce versions and remediation) are not publicly provided in the connected documents. Monitor for updates in trusted sources.

Design/Logic Flaw

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 before CP 1644 has XSS...

CVE-2017-7896

CVE-2017-7896 affects Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644, with a Cross-Site Scripting (XSS) vulnerability in the web UI. The vulnerability is documented in sources that specify IMSVA 9.1 prior to CP 1644 as affected; CVSS metrics show a base scor...