97 matches found
CVE-2022-1846
creationtimestamp| type| source ---|---|--- 2022-06-27 12:40:34+00:00| seen| https://t.me/cibsecurity/45164...
CVE-2022-1846 Tiny Contact Form <= 0.7 - Arbitrary Settings Update via CSRF
The Tiny Contact Form WordPress plugin through 0.7 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2022-1846
The CVE-2022-1846 entry concerns the Tiny Contact Form WordPress plugin (version up to 0.7) that lacks a CSRF check when updating settings, enabling a logged-in administrator to be coerced into changing settings via a CSRF attack. The connected documents consistently describe the vulnerability as...
Oracle Linux 8 : idm:DL1 / and / idm:client (ELSA-2021-1846)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1846 advisory. bind-dyndb-ldap 11.6-2 - Rebuild against bind 9.11.26 - Resolves: rhbz1904612 11.6-1 - New upstream release - Resolves: rhbz1891735 ipa 4.9.2-3.0.1 - Set...
CVE-2021-1846
Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds read was addressed with improved input validation...
CVE-2021-1846
The CVE-2021-1846 entry affects Apple platforms (macOS Big Sur 11.3, iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5) where processing a maliciously crafted audio file can disclose restricted memory due to an out-of-bounds read addressed by improved input validation. The issue is mitigated by Securi...
SUSE: Security Advisory (SUSE-SU-2019:1846-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 8 : idm:DL1 and idm:client (CESA-2021:1846)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1846 advisory. - jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Note that Nessus has not tested for this issue but has...
SUSE SLED15 / SLES15 Security Update : bzip2 (SUSE-SU-2019:1846-1)
This update for bzip2 fixes the following issues : Security issue fixed : CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1139083. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...
CVE-2019-1846
Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers is affected by a MPLS OAM Denial of Service vulnerability (CVE-2019-1846). The issue stems from incorrect handling of certain MPLS OAM packets in the MPLS OAM implementation, which can allow an unauthenticated, adjacent ...
CVE-2018-1846
IBM Rational Engineering Lifecycle Manager (RELM) versions 5.0–5.0.2 and 6.0–6.0.6 are affected by a XML External Entity (XXE) vulnerability in XML data processing. A remote attacker could disclose sensitive information or exhaust memory Resources. A fix is available: upgrade to RELM 6.0.6 with i...
Security Bulletin: Security vulnerability affects Rational Engineering Lifecycle Manager
Summary Rational Engineering Lifecycle Manager is affected by a potential security vulnerability Vulnerability Details CVEID: CVE-2018-1846 DESCRIPTION: IBM RELM is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerabilit...
Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities vulnerability
Summary IBM Security Guardium has addressed the following vulnerabilities Vulnerability Details CVEID: CVE-2012-3324 DESCRIPTION: IBM DB2, when running on Microsft Windows, could allow a remote authenticated attacker to traverse directories on the system, caused by improper validation of...
DEBIAN-CVE-2014-1846
Enlightenment before 0.17.6 might allow local users to gain privileges via vectors involving the gdb method...
CVE-2014-1846
Enlightenment before 0.17.6 might allow local users to gain privileges via vectors involving the gdb method...
CVE-2014-1846
Technical details are not publicly available in the provided documents for CVE-2014-1846; monitor for updates.
alohatube.com Open Redirect vulnerability
Vulnerable URL: http://www.alohatube.com/ktm/view.cgi?i=27187221=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:50 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 18...
CVE-2016-1861
The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1846...