93 matches found
CVE-2017-1657
The connected IBM Security Bulletin confirms CVE-2017-1657 affects IBM Resilient, where weaker than expected cryptographic algorithms could allow decrypting highly sensitive information. Affected versions are IBM Resilient 27.0–27.2 and 28.0–28.3. IBM has addressed the issue by updating to versio...
CVE-2022-1657 JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion
Vulnerable versions of the Jupiter = 6.10.1 and JupiterX = 2.0.6 Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterxcploadpaneaction AJAX action present in the...
CVE-2022-1657
CVE-2022-1657 affects WordPress Jupiter and JupiterX themes. Vulnerable are Jupiter <= 6.10.1 and JupiterX
CVE-2022-1657
creationtimestamp| type| source ---|---|--- 2022-05-19 15:47:01+00:00| seen| https://t.me/truesecator/2959 2022-06-13 18:18:07+00:00| seen| https://t.me/cibsecurity/44302...
openSUSE: Security Advisory for curl (SUSE-SU-2022:1657-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
EulerOS 2.0 SP10 : bluez (EulerOS-SA-2022-1657)
According to the versions of the bluez package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a...
SUSE: Security Advisory (SUSE-SU-2020:1657-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1657
creationtimestamp| type| source ---|---|--- 2021-01-12 22:58:06+00:00| seen| https://t.me/cibsecurity/22014 2023-04-14 22:46:49+00:00| published-proof-of-concept| https://t.me/dilagrafie/2882...
CVE-2021-1657
Windows Fax Compose Form Remote Code Execution Vulnerability...
CVE-2021-1657
Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.
KB4598242: Windows 10 Version 2004 / Windows 10 Version 20H2 January 2021 Security Update
The remote Windows host is missing security update 4598242. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-1637, CVE-2021-1645, CVE-2021-1656, CVE-2021-1663,...
KB4598297: Windows Server 2012 January 2021 Security Update
The remote Windows host is missing security update 4598297 or cumulative update 4598278. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17087, CVE-2021-1648, CVE-2021-1649,...
KB4598229: Windows 10 Version 1909 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
KB4598245: Windows 10 Version 1803 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
KB4598230: Windows 10 Version 1809 and Windows Server 2019 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
KLA12041 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, spoof user interface, bypass security restrictions, cause denial of service. Below is a...
CVE-2020-1657
Affected software: Juniper Junos OS on SRX Series. Vulnerable in the key-management-daemon (kmd) before established SA, allowing spoofed IPSec packets to disrupt IPSec setup and cause DoS. Affected releases include 12.3X48 (before 12.3X48-D90), 15.1X49 (before 15.1X49-D190), 17.4 (before 17.4R2-S...
CVE-2020-1657 Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.
On SRX Series devices, a vulnerability in the key-management-daemon kmd daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association SA is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these...
megabusinessdirectory.com Cross Site Scripting vulnerability
Security Researcher TusharASDAcademyKota Helped patch 5 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting megabusinessdirectory.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147...
CVE-2019-1657
CVE-2019-1657 affects Cisco AMP Threat Grid (Cloud and on‑premise Threat Grid Appliance). The issue stems from unsafe API key creation, enabling an authenticated, remote attacker to access sensitive information via API key credentials (information disclosure). Likely impact to confidentiality is ...