104 matches found
CVE-2022-1654 Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation
Jupiter Theme = 6.10.1 and JupiterX Core Plugin = 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abbuninstalltemplate" both and "jupiterxcorecpuninstalltemplate" JupiterX Core Only AJAX actions...
CVE-2022-1654 Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation
Jupiter Theme = 6.10.1 and JupiterX Core Plugin = 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abbuninstalltemplate" both and "jupiterxcorecpuninstalltemplate" JupiterX Core Only AJAX actions...
CVE-2022-1654
CVE-2022-1654 affects Jupiter Theme (<= 6.10.1) and JupiterX Core Plugin (
CVE-2022-1654
creationtimestamp| type| source ---|---|--- 2022-05-19 15:47:01+00:00| seen| https://t.me/truesecator/2959 2022-06-13 18:18:11+00:00| seen| https://t.me/cibsecurity/44305...
SUSE: Security Advisory (SUSE-SU-2013:0618-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1654-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1654
Windows CSC Service Elevation of Privilege Vulnerability...
CVE-2021-1654
Technical details for CVE-2021-1654 are not publicly provided in the connected documents. Monitor for updates as new information becomes available; current sources do not specify affected product versions, root cause, impact, or remediation beyond the initial description.
KB4598242: Windows 10 Version 2004 / Windows 10 Version 20H2 January 2021 Security Update
The remote Windows host is missing security update 4598242. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-1637, CVE-2021-1645, CVE-2021-1656, CVE-2021-1663,...
KB4598229: Windows 10 Version 1909 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
KB4598297: Windows Server 2012 January 2021 Security Update
The remote Windows host is missing security update 4598297 or cumulative update 4598278. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17087, CVE-2021-1648, CVE-2021-1649,...
KB4598230: Windows 10 Version 1809 and Windows Server 2019 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
KB4598245: Windows 10 Version 1803 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
CVE-2020-1654 Junos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution
On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service DoS or Remote Code Execution RCE Continued processing of this malformed HTTP message may result in an extended Denial of...
CVE-2020-1654
CVE-2020-1654 affects Juniper Networks Junos OS on SRX Series when ICAP redirect service is enabled. A malformed HTTP message can cause DoS or RCE; continued processing may extend DoS. Affected releases include 18.1 before 18.1R3-S9; 18.2 before 18.2R2-S7 (and 18.2R3-S3); 18.3 before 18.3R1-S7, 1...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2019-1654)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-1654
Cisco Aironet Series APs running Cisco AP-COS are affected by CVE-2019-1654, where an authenticated, local attacker with valid device credentials can access the development shell (devshell) and gain root access to the underlying Linux OS due to improper input validation at the CLI authentication ...
CVE-2018-1654
IBM Cúram Social Program Management CVE-2018-1654 is an open redirect vulnerability that enables a remote attacker to perform phishing by spoofing the displayed URL and redirecting users to a malicious site. Affected IBM Cúram SPM versions span 6.0.5.0–6.2.0.6, 7.0.0.0–7.0.3.0, with remediation g...
Security Bulletin: IBM Cúram Social Program Management contains an open redirect vulnerability (CVE-2018-1654)
Summary A recent penetration test in the product identified that an open redirect issue exists in the IBM Cúram Social Program Management product. The issue could enable a remote attacker to use an attack vector to conduct an open redirect attack, where a redirect value is not validated...
Security Bulletin: A Security Vulnerability has Been Identified in IBM Spectrum Scale v5.0.0 shipped with IBM Cloud PowerVC Manager for Software Defined Infrastructure (SDI) v1.1.0 (CVE-2017-1654)
Summary IBM Spectrum Scale v5.0.0 is shipped with IBM Cloud PowerVC Manager for Software Defined Infrastructure SDI v1.1.0. Information about a security vulnerability affecting IBM Spectrum Scale v5.0.0 has been published in a security bulletin. Vulnerability Details Refer to the security bulleti...