CVE-2023-1778 Default Credential Vulnerability in GajShield Data Security Firewall

This vulnerability exists in GajShield Data Security Firewall firmware versions prior to v4.28 except v4.21 due to insecure default credentials which allows remote attacker to login as superuser by using default username/password via web-based management interface and/or exposed SSH port thereby...

CVE-2022-1778

CVE-2022-1778 describes an improper input validation that causes a buffer overflow during startup while reading a specific configuration file in Hitachi Energy MicroSCADA X SYS600. Affected products are SYS600 versions 10 through 10.3.1; the configuration file is accessible only to administrators...

Amazon Linux 2 : java-11-amazon-corretto (ALAS-2022-1778)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.15+9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1778 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE...

CVE-2021-1778

An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafte...

CVE-2021-1778

CVE-2021-1778 describes an out-of-bounds read in curl triggered while processing a malicious image. The issue is addressed by improved bounds checking and is fixed in Apple platforms: macOS Big Sur 11.2, Catalina Mojave/Big Sur security updates, and iOS/watchOS/tvOS updates (Security Update 2021-...

CVE-2021-1778

An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafte...

CVE-2020-1778

creationtimestamp| type| source ---|---|--- 2020-11-23 18:45:57+00:00| seen| https://t.me/cibsecurity/16704...

CVE-2020-1778

When OTRS uses multiple backends for user authentication with LDAP, agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions...

CVE-2020-1778

When OTRS uses multiple backends for user authentication with LDAP, agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions...

CVE-2020-1778

When OTRS uses multiple backends for user authentication with LDAP, agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions...

CVE-2020-1778

CVE-2020-1778 affects OTRS up to version 8.0.9. The issue arises when multiple LDAP backends are used for user authentication, allowing agents to log in even if their account is marked invalid. Several connected sources confirm the condition and affected versions, but no public details on a fix v...

CVE-2020-1778 Bypassing user account validation

When OTRS uses multiple backends for user authentication with LDAP, agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2019-1778)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1778)

According to its self-reported version, Cisco NX-OS Software is affected by following vulnerability - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of...

CVE-2019-1778

CVE-2019-1778 affects Cisco NX-OS Software CLI. A vulnerable component is CLI argument handling, allowing an authenticated local attacker with administrator credentials to inject and execute arbitrary commands on the underlying Linux OS with root privileges. Impact is elevated command execution (...

Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1778)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI comman...

CVE-2018-1778

CVE-2018-1778 (IBM API Connect / LoopBack) affects IBM API Connect versions 2018.1 through 2018.4.1 and 5.0.8.0 through 5.0.8.4. The vulnerability arises when the AccessToken model is exposed via a REST API, enabling an attacker to create an access token for any user who has a known userId, poten...

EulerOS 2.0 SP1 : gimp (EulerOS-SA-2018-1022)

According to the versions of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling...

CVE-2015-1778

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination...

CVE-2015-1778

CVE-2015-1778 concerns OpenDaylight’s OpenDaylight Helium lineage. The vulnerability arises from the custom authentication realm used by karaf-tomcat’s opendaylight realm, which will authenticate any username/password combination in OpenDaylight installations prior to Helium SR3. The result is an...