96 matches found
K16827: Apache Struts vulnerability CVE-2015-1831
Security Advisory Description Description Incorrect default exclude patterns were introduced in version 2.3.20 of Struts, if default settings are used, the attacker can compromise internal application's state. CVE-2015-1831 Impact There is no impact; F5 products are not affected by this...
Amazon Linux 2 : openssl (ALAS-2022-1831)
The version of openssl installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1831 advisory. A flaw was found in OpenSSL. The issue in CVE-2022-1292 did not find other places in the crehash script where it possibly passed...
CVE-2022-1831 WPlite <= 1.3.1 - Arbitrary Settings Update via CSRF
The WPlite WordPress plugin through 1.3.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2022-1831
CVE-2022-1831 affects the WordPress WPlite plugin up to version 1.3.1. The vulnerability is a cross-site request forgery (CSRF) flaw that skips CSRF checks when updating settings, enabling an authenticated (logged-in) attacker to cause an administrator to change configuration. Documented impact i...
openSUSE: Security Advisory for slurm_20_11 (SUSE-SU-2022:1831-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-1831
creationtimestamp| type| source ---|---|--- 2021-09-08 18:28:49+00:00| seen| https://t.me/cibsecurity/28446...
CVE-2021-1831
The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files...
CVE-2021-1831
The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files...
CVE-2021-1831
CVE-2021-1831 relates to an Apple Shortcuts permission issue where shortcuts could access restricted files due to insufficient permission checks. The vulnerability was addressed with improved permissions logic and fixed in iOS 14.5 / iPadOS 14.5 . Public documents in the connected set confirm the...
CVE-2020-1831
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...
CVE-2020-1831
CVE-2020-1831 affects Huawei Mate 20 devices with versions older than 10.0.0.195 (SP31C00E74R3P8). The issue is an improper authorization in the digital balance feature, where the usage time of certain users is not sufficiently restricted; a successful exploit could allow a user to exceed the dig...
Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-1831)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco Email Security Appliance Content Filter Bypass Vulnerability (cisco-sa-20190417-esa-filter-bypass)
According to its self-reported version, Cisco Email Security Appliance ESA is affected by following vulnerability - A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured...
CVE-2019-1831
CVE-2019-1831 affects Cisco AsyncOS Software for Cisco Email Security Appliance (ESA). The flaw stems from improper input validation of the email body in the message scanning component, allowing an unauthenticated, remote attacker to bypass configured content filters by inserting specific charact...
Security Bulletin: A vulnerability in Open Source Struts affects the IBM FlashSystem V840 (CVE 2015-1831)
Summary There is a vulnerability in the Open Source Struts used by the IBM FlashSystem V840. An exploit of this vulnerability could result in an attacker gaining control of internal states which affect the FlashSystem V840. Vulnerability Details CVEID: CVE-2015-1831 DESCRIPTION: An unspecified...
Security Bulletin: A vulnerability in Open Source Struts affects the IBM FlashSystem 900 (CVE 2015-1831)
Summary There is a vulnerability in the Open Source Struts used by the IBM FlashSystem 900. An exploit of this vulnerability could result in an attacker gaining control of internal states which affect the FlashSystem 900. Vulnerability Details CVEID: CVE-2015-1831 DESCRIPTION: An unspecified...
Security Bulletin: A vulnerability in Open Source Struts affects the IBM FlashSystem V9000 (CVE 2015-1831)
Summary There is a vulnerability in the Open Source Struts used by the IBM FlashSystem V9000. An exploit of this vulnerability could result in an attacker gaining control of internal states which affect the FlashSystem V9000. Vulnerability Details CVEID: CVE-2015-1831 DESCRIPTION: An unspecified...
CVE-2017-1831
CVE-2017-1831 is rejected per the description.
CVE-2016-1831
CVE-2016-1831 affects Apple iOS prior to 9.3.2 and OS X prior to 10.11.5. The vulnerability allows a crafted app to execute arbitrary code in a privileged kernel context or cause a memory corruption–related DoS. The issue is categorized as a kernel/memory corruption type and is documented in Appl...