CVE-2021-1668

CVE-2021-1668 : Technical details are not publicly available in the provided documents. Monitor for updates.

KB4598297: Windows Server 2012 January 2021 Security Update

The remote Windows host is missing security update 4598297 or cumulative update 4598278. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17087, CVE-2021-1648, CVE-2021-1649,...

KB4598229: Windows 10 Version 1909 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

KB4598242: Windows 10 Version 2004 / Windows 10 Version 20H2 January 2021 Security Update

The remote Windows host is missing security update 4598242. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-1637, CVE-2021-1645, CVE-2021-1656, CVE-2021-1663,...

KLA12041 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, spoof user interface, bypass security restrictions, cause denial of service. Below is a...

KB4598230: Windows 10 Version 1809 and Windows Server 2019 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

KB4598245: Windows 10 Version 1803 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

CVE-2020-1668

On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lead to traffic interruption. This issue occurs when multicast packets are received by the layer 2 interface. To check if the device has high CPU load...

CVE-2020-1668

CVE-2020-1668 affects Juniper Networks Junos OS on the EX2300 Series. The issue is triggered by receipt of a stream of specific multicast packets on the layer-2 interface, causing high CPU load and potential traffic interruption. Affected versions include 18.1 before 18.1R3-S11; 18.2 before 18.2R...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max devices running before 56.D3JM6 are affected by CVE-2018-16618. An exposed storeintenttranslate.x service on localhost:1668 accepts requests that combine random characters with an Android activity name; the activity name is inserted into a shell command. By injecting shell metach...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

Security Bulletin: IBM MQ Appliance is affected by an unauthorized access vulnerability (CVE-2018-1668)

Summary IBM MQ Appliance has addressed the following unauthorized access vulnerability. Vulnerability Details CVEID: CVE-2018-1668 DESCRIPTION: IBM WebSphere DataPower Appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. CVSS Base Score: 5.3...

Debian DLA-1668-1 : libarchive security update

Fuzzing found two further file-format specific issues in libarchive, a read-only segfault in 7z, and an infinite loop in ISO9660. CVE-2019-1000019 Out-of-bounds Read vulnerability in 7zip decompression, that can result in a crash denial of service, CWE-125 CVE-2019-1000020 Vulnerability in ISO966...

Debian: Security Advisory (DLA-1668-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1668

IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894...

CVE-2018-1668

CVE-2018-1668 affects IBM DataPower Gateway appliances (versions 7.5.0.0–7.5.0.19, 7.5.1.0–7.5.1.18, 7.5.2.0–7.5.2.18, 7.6.0.0–7.6.0.11) and IBM MQ Appliance in some postings, where the IPMI service could be left at a “null” login, enabling read access to IPMI data and disclosure of sensitive inf...

CVE-2019-1668

Cisco SocialMiner's Chat Feed contains XSS vulnerabilities due to insufficient sanitization of user-supplied input in chat feed HTTP requests. An unauthenticated, remote attacker could lure a user to click attacker-controlled content, enabling arbitrary script execution in the context of the affe...

Security Bulletin:IBM Security Key Lifecycle Manager is vulnerable to Spoofing through URL Redirection (CVE-2017-1668)

Summary IBM Security Key Lifecycle Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. Vulnerability Details CVEID: CVE-2017-1668 DESCRIPTION: IBM Tivoli Key Lifecycle Manager could allow a remote attacker to conduct phishing attacks, using an open...