Lucene search
+L

96 matches found

F5 Networks
F5 Networks
added 2023/02/21 7:04 p.m.39 views

K16827: Apache Struts vulnerability CVE-2015-1831

Security Advisory Description Description Incorrect default exclude patterns were introduced in version 2.3.20 of Struts, if default settings are used, the attacker can compromise internal application's state. CVE-2015-1831 Impact There is no impact; F5 products are not affected by this...

7.5CVSS6.5AI score0.06363EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/08/08 12:00 a.m.63 views

Amazon Linux 2 : openssl (ALAS-2022-1831)

The version of openssl installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1831 advisory. A flaw was found in OpenSSL. The issue in CVE-2022-1292 did not find other places in the crehash script where it possibly passed...

10CVSS7.3AI score0.95404EPSS
SaveExploits6References3
Cvelist
Cvelist
added 2022/06/20 10:26 a.m.36 views

CVE-2022-1831 WPlite <= 1.3.1 - Arbitrary Settings Update via CSRF

The WPlite WordPress plugin through 1.3.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.6AI score0.0041EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/20 10:26 a.m.95 views

CVE-2022-1831

CVE-2022-1831 affects the WordPress WPlite plugin up to version 1.3.1. The vulnerability is a cross-site request forgery (CSRF) flaw that skips CSRF checks when updating settings, enabling an authenticated (logged-in) attacker to cause an administrator to change configuration. Documented impact i...

6.5CVSS6.3AI score0.0041EPSS
SaveExploits1References1Affected Software1
OpenVAS
OpenVAS
added 2022/05/25 12:00 a.m.43 views

openSUSE: Security Advisory for slurm_20_11 (SUSE-SU-2022:1831-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9CVSS8.8AI score0.0286EPSS
SaveExploits0References2
Circl
Circl
added 2021/09/08 6:28 p.m.12 views

CVE-2021-1831

creationtimestamp| type| source ---|---|--- 2021-09-08 18:28:49+00:00| seen| https://t.me/cibsecurity/28446...

5.5CVSS5.5AI score0.0097EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/08 3:15 p.m.26 views

CVE-2021-1831

The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files...

5.5CVSS0.0097EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/08 2:43 p.m.41 views

CVE-2021-1831

The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files...

5.5AI score0.0097EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/08 2:43 p.m.77 views

CVE-2021-1831

CVE-2021-1831 relates to an Apple Shortcuts permission issue where shortcuts could access restricted files due to insufficient permission checks. The vulnerability was addressed with improved permissions logic and fixed in iOS 14.5 / iPadOS 14.5 . Public documents in the connected set confirm the...

5.5CVSS5.1AI score0.0097EPSS
SaveExploits0References1Affected Software2
OSV
OSV
added 2020/05/29 9:15 p.m.10 views

CVE-2020-1831

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

2.4CVSS5.8AI score0.00196EPSS
SaveExploits0References1
CVE
CVE
added 2020/05/29 8:13 p.m.100 views

CVE-2020-1831

CVE-2020-1831 affects Huawei Mate 20 devices with versions older than 10.0.0.195 (SP31C00E74R3P8). The issue is an improper authorization in the digital balance feature, where the usage time of certain users is not sufficiently restricted; a successful exploit could allow a user to exceed the dig...

2.4CVSS4.1AI score0.00196EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for wavpack (EulerOS-SA-2019-1831)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.2AI score0.02542EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/07/19 12:00 a.m.24 views

Cisco Email Security Appliance Content Filter Bypass Vulnerability (cisco-sa-20190417-esa-filter-bypass)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by following vulnerability - A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured...

5.8CVSS6AI score0.01647EPSS
SaveExploits0References4
CVE
CVE
added 2019/04/18 1:20 a.m.69 views

CVE-2019-1831

CVE-2019-1831 affects Cisco AsyncOS Software for Cisco Email Security Appliance (ESA). The flaw stems from improper input validation of the email body in the message scanning component, allowing an unauthenticated, remote attacker to bypass configured content filters by inserting specific charact...

5.8CVSS5.5AI score0.01647EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 12:50 a.m.23 views

Security Bulletin: A vulnerability in Open Source Struts affects the IBM FlashSystem V840 (CVE 2015-1831)

Summary There is a vulnerability in the Open Source Struts used by the IBM FlashSystem V840. An exploit of this vulnerability could result in an attacker gaining control of internal states which affect the FlashSystem V840. Vulnerability Details CVEID: CVE-2015-1831 DESCRIPTION: An unspecified...

7.5CVSS0.2AI score0.06363EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 12:50 a.m.27 views

Security Bulletin: A vulnerability in Open Source Struts affects the IBM FlashSystem 900 (CVE 2015-1831)

Summary There is a vulnerability in the Open Source Struts used by the IBM FlashSystem 900. An exploit of this vulnerability could result in an attacker gaining control of internal states which affect the FlashSystem 900. Vulnerability Details CVEID: CVE-2015-1831 DESCRIPTION: An unspecified...

7.5CVSS0.5AI score0.06363EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 12:09 a.m.22 views

Security Bulletin: A vulnerability in Open Source Struts affects the IBM FlashSystem V9000 (CVE 2015-1831)

Summary There is a vulnerability in the Open Source Struts used by the IBM FlashSystem V9000. An exploit of this vulnerability could result in an attacker gaining control of internal states which affect the FlashSystem V9000. Vulnerability Details CVEID: CVE-2015-1831 DESCRIPTION: An unspecified...

7.5CVSS0.5AI score0.06363EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2018/01/05 2:00 p.m.16 views

CVE-2017-1831

...

SaveExploits0
CVE
CVE
added 2018/01/05 2:00 p.m.30 views

CVE-2017-1831

CVE-2017-1831 is rejected per the description.

7.3AI score
SaveExploits0
CVE
CVE
added 2016/05/20 10:00 a.m.62 views

CVE-2016-1831

CVE-2016-1831 affects Apple iOS prior to 9.3.2 and OS X prior to 10.11.5. The vulnerability allows a crafted app to execute arbitrary code in a privileged kernel context or cause a memory corruption–related DoS. The issue is categorized as a kernel/memory corruption type and is documented in Appl...

9.3CVSS7.5AI score0.01444EPSS
SaveExploits0References6Affected Software4
Rows per page
Query Builder