119 matches found
CVE-2021-1680 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
...
CVE-2021-1680
Technical details about CVE-2021-1680 are not publicly available in the provided connected documents. Monitor for updates for affected product, root cause, impact, and remediation information.
KB4598242: Windows 10 Version 2004 / Windows 10 Version 20H2 January 2021 Security Update
The remote Windows host is missing security update 4598242. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-1637, CVE-2021-1645, CVE-2021-1656, CVE-2021-1663,...
CVE-2020-1680 Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.
On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...
CVE-2020-1680
CVE-2020-1680 affects Juniper Networks Junos OS on MX Series with MS-MIC/MS-MPC NAT64 translation. A malformed IPv6 packet can crash the MS-PIC component on the multiservice card, caused by translating the IPv6 packet to IPv4, allowing an unauthenticated attacker to trigger repeated MS-PIC crashe...
Windows 10 win32kbase HMMarkObjectDestroy Arbitrary Code Execution Vulnerability
Summary A use after free vulnerability exists in Windows 10, Version 10.0.19033.1, when a Win32k component fails to properly handle objects in memory. Successful exploitation of this vulnerability can lead to arbitrary code execution in the kernel context and elevation of privileges. This...
Cross-Site Scripting (XSS)
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
CVE-2018-1680
CVE-2018-1680 affects IBM Security Privileged Identity Manager Virtual Appliance (ISPIM VA) 2.2.1, where the default configuration does not require strong passwords by default, enabling easier compromise of user accounts. The issue stems from weak password policy enforcement within the appliance....
CVE-2018-1680
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 145236...
CVE-2019-1680
The CVE-2019-1680 issue affects Cisco Webex Business Suite pre-3.0.9 where improper input validation allows an unauthenticated, remote attacker to inject arbitrary text into a user’s browser via a malicious URL, enabling content injection and potential spoofing. Connected sources corroborate the ...
CentOS Update for bind CESA-2017:1680 centos7
Check the version of bind SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882750";...
Oracle Linux 7 : bind (ELSA-2017-1680)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1680 advisory. - Fix CVE-2017-3142 and CVE-2017-3143 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
Virtuozzo Linux Errata and Security Advisory 2017:1680 Important
Upstream security update. Follow RHSA-2017:1680 for details...
PT-2017-16823 · Philip Hazel +3 · Pcre +3
Name of the Vulnerable Software and Affected Versions: PCRE versions prior to revision 1680 PCRE versions 8.x and earlier Description: The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a crafted regular expression. This i...
Ubuntu: Security Advisory (USN-2992-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2992-1: Oxide vulnerabilities
An unspecified security issue was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions. CVE-2016-1673 An issue was discovered with Document reattachment in Blink in some circumstances. ...
CVE-2016-1680
CVE-2016-1680 is a use-after-free in Skia (SkFontHost_FreeType.cpp) used by Google Chrome prior to 51.0.2704.63. The vulnerability could cause a denial of service via heap memory corruption. Chrome 51.0.2704.63 (and later) includes fixes for this issue. The available documents provide the vulnera...
SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nspr (SUSE-SU-2015:1680-1)
Mozilla Firefox was updated to version 38.3.0 ESR bsc947003, fixing bugs and security issues. - MFSA 2015-96/CVE-2015-4500/CVE-2015-4501 Miscellaneous memory safety hazards rv:41.0 / rv:38.3 - MFSA 2015-101/CVE-2015-4506 Buffer overflow in libvpx while parsing vp9 format video - MFSA...
Oracle: Security Advisory (ELSA-2013-0820)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
