183 matches found
CentOS 8 : mod_auth_openidc:2.3 (CESA-2022:1823)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:1823 advisory. - modauthopenidc: open redirect in oidcvalidateredirecturl CVE-2021-32786 - modauthopenidc: hardcoded static IV and AAD with a reused key in AES GCM...
SUSE: Security Advisory (SUSE-SU-2019:1823-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1823
This CVE-2015-1823 entry is rejected and does not represent an active vulnerability.
Debian: Security Advisory (DLA-1823-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1823-1 : linux security update (SACK Panic) (SACK Slowness)
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2019-3846, CVE-2019-10126 huangwen reported multiple buffer overflows in the Marvell wifi mwifiex driver, which a local user could use to cause...
CVE-2019-1823
creationtimestamp| type| source ---|---|--- 2019-05-16 18:58:50+00:00| seen| https://t.me/informationsecuritychannel/27576...
CVE-2019-1823
CVE-2019-1823 affects Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager web-based management interface. The issue allows an authenticated, remote attacker to execute code with root-level privileges on the underlying OS by uploading a crafted file via the adminis...
Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow a remote attacker to gain the ability to execute arbitrary code with elevated privileges on the underlying operating system. One of these...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the PHP XSL extension did not restrict the file writing capability of libxslt. A remote attacker could use this flaw to create or overwrite an arbitrary file that is writable by the user...
CVE-2018-1823
CVE-2018-1823 affects IBM Rational Quality Manager (RQM) 5.0 through 6.0.6. The issue is a cross-site scripting vulnerability that lets an attacker embed arbitrary JavaScript in the Web UI, potentially altering functionality and leading to credential disclosure in a trusted session. According to ...
CVE-2017-1823
CVE-2017-1823 is rejected and not used, as explicitly stated in the Initial Description.
CVE-2016-1823
creationtimestamp| type| source ---|---|--- 2016-06-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39927...
CVE-2016-1823
CVE-2016-1823 affects Apple iOS 9.3.2 and OS X 10.11.5 (as well as tvOS 9.2.1 and watchOS 2.2.1) via IOHIDDevice::handleReportWithTime. A crafted IOHIDReportType enum can trigger an incorrect cast, causing out-of-bounds read and memory corruption, enabling an attacker to execute arbitrary code in...
Oracle: Security Advisory (ELSA-2012-0546)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2012-0547)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2012-77)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KLA10609 Multiple vulnerabilities in Microsoft Lync Server
Multiple serious vulnerabilities have been found in Microsoft Lync Server. Malicious users can exploit these vulnerabilities to inject arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. XSS vulnerability can be exploited remotely via a specially designed URL...
PHP CGI Argument Injection Exploit
No description provided by source. Exploit Title: Cve-2012-1823 PHP CGI Argument Injection Exploit Date: May 4, 2012 Author: rayh4c0x4080sec0x2ecom Exploit Discovered by wofeiwo0x4080sec0x2ecom import socket import sys def cgiexploit: pwncode = ?php phpinfo;? postLength = lenpwncode httpraw=POST...