103 matches found
CVE-2022-1807
CVE-2022-1807 describes multiple SQL injection vulnerabilities in the Webadmin component of Sophos Firewall, enabling privilege escalation from admin to super-admin. Affected products/versions: Sophos Firewall Webadmin prior to 18.5 MR4 and prior to 19.0 MR1. Root cause: SQLi in Webadmin leading ...
CVE-2022-1807
Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1...
CVE-2021-1807
CVE-2021-1807 is an Apple Safari input validation issue that allows a local user to write arbitrary files. The vulnerability stems from inadequate input sanitization; it is fixed in iOS 14.5 / iPadOS 14.5 / watchOS 7.4. Affected products include Apple Safari on those platforms. The CVE entry note...
SUSE: Security Advisory (SUSE-SU-2021:1807-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1807-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1807
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188C00E74R3P8 have an improper authorization vulnerability. The software does not properly restrict certain user's modification of certain configuration file, successful exploit could allow the attacker to bypass app lock after a series...
CVE-2020-1807
CVE-2020-1807 affects Huawei Mate 20 smartphones with versions earlier than 10.0.0.188 (C00E74R3P8). The vulnerability is an improper authorization that does not properly restrict a user’s modification of certain configuration files, potentially allowing an attacker to bypass the app lock after a...
CVE-2019-1807
The CVE-2019-1807 issue affects the Cisco Umbrella Dashboard web UI. It arises from session management: when a user authenticates and changes credentials in another active session, the app does not invalidate the existing session. An attacker with a separate, authenticated session could access th...
Cross-Site Scripting (XSS)
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...
Path Traversal
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...
Sensitive Information Disclosure
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...
CVE-2016-1807
creationtimestamp| type| source ---|---|--- 2016-06-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39929...
CVE-2016-1807
CVE-2016-1807 affects Apple’s Disk Images subsystem across iOS (before 9.3.2), OS X (before 10.11.5), tvOS (before 9.2.1), and watchOS (before 2.2.1). The vulnerability is a race condition in Disk Images parsing/handling that can allow a local user to read kernel memory, i.e., obtain sensitive in...
CVE-2015-1807
CVE-2015-1807 affects Jenkins (CloudBees Jenkins CI and Jenkins core) prior to 1.600 and LTS prior to 1.596.1. The issue is a directory traversal vulnerability: during artifact handling, Jenkins could follow a symlink, enabling a remote authenticated user with certain permissions to read arbitrar...
Oracle: Security Advisory (ELSA-2011-1807)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for jenkins-executable-war FEDORA-2015-5430
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 22 : jenkins-1.606-1.fc22 / jenkins-executable-war-1.29-4.fc22 / jffi-1.2.7-5.fc22 (2015-5430)
Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...
Fedora 21 : jenkins-1.590-3.fc21 (2015-5466)
Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...
Fedora Update for jenkins FEDORA-2015-5466
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OracleVM 2.1 : freetype (OVMSA-2009-0012)
The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-0946 Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in 1 smooth/ftsmooth.c, 2...