CVE-2024-1860

CVE-2024-1860 concerns the Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress (antihacker)

WordPress Anti Hacker Plugin <= 4.51 is vulnerable to Broken Access Control

Software Anti Hacker Type Plugin Vulnerable versions = 4.51 Fixed in 4.52 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1860 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID bbb1acb1d01e Credits Lucio Sá Required privilege...

HPESBHF04502 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.8007-05-2023 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to 1.8007-05-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF04500 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.8007-05-2023 U46 ROM Family, - Prior to 2.9007-20-2023 U30 ROM Family HPE StoreEasy 1560 Storage - Prior to 2.9007-20-2023 HPE...

CVE-2023-1860

creationtimestamp| type| source ---|---|--- 2023-04-05 12:27:55+00:00| seen| https://t.me/cibsecurity/61439...

Debian: Security Advisory (DLA-210-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1860

creationtimestamp| type| source ---|---|--- 2023-03-06 07:21:51+00:00| published-proof-of-concept| https://t.me/dilagrafie/2387 2026-08-02 11:52:14+00:00| seen| https://gist.github.com/0x9fury/f506159fd3ab6ce25a54856db53d7545...

SUSE CVE-2010-1860

The htmlentitydecode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents or trigger memory corruption by causing a userspace interruption of an internal call, related to the call time pass by reference feature...

HPESBHF04425 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS, INTEL-SA-00700, 2023.1 IPU – Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage -Prior to 1.7202-02-2023 U46 ROM Family HPE StoreEasy 1860 Storage -Prior to 1.7202-02-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF04419 rev.1 - Certain HPE StoreEasy Servers using Certain Intel Processor, INTEL-SA-00738, 2023.1 IPU – Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.7202-02-2023 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to 1.7202-02-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Base...

D-Link DAP-1860 Command Injection (CVE-2019-19597)

A command injection vulnerability exists in D-Link DAP-1860. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-1860

creationtimestamp| type| source ---|---|--- 2022-07-28 02:11:51+00:00| seen| https://t.me/cibsecurity/47151...

CVE-2022-1860

Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user interactions...

UBUNTU-CVE-2022-1860

Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user interactions...

CVE-2022-1860

Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user interactions...

CVE-2022-1860

CVE-2022-1860 affects Google Chrome UI Foundations on Chrome OS prior to 102.0.5005.61. It is described as a use-after-free vulnerability in the UI Foundations component that can lead to heap corruption when a user is drawn into specific interactions. The issue is confirmed in Chrome release note...

Fedora: Security Advisory for chromium (FEDORA-2022-bcb096166f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] [DSA 5148-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5148-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 25, 2022 https://www.debian.org/security/faq -...

CVE-2022-1860

No description is available for this CVE...

Oracle Linux 8 : maven:3.6 (ELSA-2022-1860)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1860 advisory. - Resolves: CVE-2020-13956 maven Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...