CVE-2022-1779

creationtimestamp| type| source ---|---|--- 2022-06-13 16:17:13+00:00| seen| https://t.me/cibsecurity/44282...

Amazon Linux 2 : thunderbird (ALAS-2022-1779)

The version of thunderbird installed on the remote host is prior to 91.7.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1779 advisory. A flaw was found in Thunderbird. The vulnerability occurs due to an out-of-bounds write of one byte when processing t...

SUSE: Security Advisory (SUSE-SU-2015:0870-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:14704-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1779

CVE-2021-1779 affects the IOKit component on macOS (Big Sur 11.0.1, Catalina 10.15.7, Mojave 10.14.6). A logic error in kext loading was addressed with improved state handling, allowing an application to potentially execute arbitrary code with system privileges. Apple lists remediation in macOS B...

CVE-2020-1779

When dynamic templates are used OTRSTicketForms, admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior...

CVE-2020-1779 Dynamic templates reveal sensitive data when OTRS tags are used

When dynamic templates are used OTRSTicketForms, admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior...

CVE-2020-1779

CVE-2020-1779 – Information disclosure in OTRS TicketForms : The issue affects OTRS AG OTRSTicketForms across 6.0.x (up to 6.0.40), 7.0.x (up to 7.0.29), and 8.0.x (up to 8.0.3). When dynamic templates are used, administrators can insert OTRS tags that are not properly masked, potentially reveali...

Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1779)

According to its self-reported version, Cisco NX-OS Software is affected by the vulnerability that allows an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to insufficient...

openSUSE: Security Advisory for ledger (openSUSE-SU-2019:1779-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-1779

Cisco FXOS and NX-OS Software contain a command-injection vulnerability in the CLI due to insufficient validation of arguments for certain commands. An authenticated, local attacker with valid credentials could exploit this to execute arbitrary OS commands with elevated privileges on the affected...

Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1779)

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to insufficient validation of arguments...

CVE-2018-1779

CVE-2018-1779 affects IBM API Connect 2018.1 through 2018.3.7, where the management service could be overwhelmed by unauthenticated requests containing large JSON payloads due to insufficient JSON size limits. The vulnerability can cause a denial of service, as the server may allocate excessive r...

Security Bulletin: IBM API Connect is affected by a denial of service vulnerability via large JSON payloads (CVE-2018-1779)

Summary API Connect has addressed the following vulnerability. The management microservice in API Connect version 2018.1 through 2018.3.7 is vulnerable to denial of service attacks via large JSON payloads. An attacker can flood the management service with unauthenticated api requests with large...

RHEL 7 : qemu-kvm-rhev (RHSA-2015:1931)

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

Security Bulletin: PowerKVM is affected by a Qemu vulnerability (CVE-2015-1779)

Summary PowerKVM is vulnerable to Qemu vulnerability CVE-2015-1779. Vulnerability Details CVEID: CVE-2015-1779 DESCRIPTION: QEMU is vulnerable to a denial of service, caused by an error when processing incoming frames by the websocket frame decoder. A remote attacker from within the local network...

CentOS Update for xmlrpc3-client CESA-2018:1779 centos6

Check the version of xmlrpc3-client SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882910";...

RHSA-2018:1779

creationtimestamp| type| source ---|---|--- 2018-05-31 19:25:24+00:00| seen| Telegram/b4hNPER-d0-H0Jn9przJWuFTEo9Tiei5LjClENrhTjeWUw...

CVE-2017-1779

IBM Cognos Analytics 11.0.x has a vulnerability where cached credentials are stored locally and could be obtained by a local user. The issue affects IBM Cognos Analytics versions 11.0.0.0 through 11.0.7.0. Root cause: credentials caching without sufficient protection allows local access to cached...

Security update for xen (important)

xen was updated to version 4.4.4 to fix 33 security issues. These security issues were fixed: - CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling bsc967012. - CVE-2015-5239: Integer overflow in vncclientread and protocolclientmsg bsc944463. - CVE-2016-2270: Xen allow...