16 matches found
CVE-2019-18624
Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO aka Right to Left Override approach, as demonstrated by misinterpretation of malicious%E2%80%AEtxt.apk as maliciouskpa.txt. This affects 44.1.2254.142553, 44.1.2254.142659, and...
CVE-2019-18624
creationtimestamp| type| source ---|---|--- 2024-01-29 18:16:08+00:00| seen| https://t.me/ctinow/175432...
Grafana <= 6.0.0 Multiple XSS Vulnerabilities
Grafana is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
JetBrains TeamCity Access Control Error Vulnerability (CNVD-2022-18624)
JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Jetbrains. An access control error vulnerability exists in JetBrains TeamCity, which stems from the fact that the product does not effectively restrict permissions for the Agent Push feature. An...
AlmaLinux 8 : grafana (ALSA-2020:4682)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4682 advisory. - Grafana 5.3.1 has XSS via a column style on the Dashboard Table Panel screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...
CentOS 8 : grafana (CESA-2020:4682)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4682 advisory. - grafana: XSS vulnerability via a column style on the Dashboard Table Panel screen CVE-2018-18624 - grafana: arbitrary file read via MySQL data source...
Moderate: Red Hat Security Advisory: grafana security, bug fix, and enhancement update
An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.1 image security update
An update is now available for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2018-18624
creationtimestamp| type| source ---|---|--- 2020-06-02 20:55:26+00:00| seen| https://t.me/cibsecurity/12505...
CVE-2018-18624
Grafana 5.3.1 has XSS via a column style on the "Dashboard Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...
UBUNTU-CVE-2018-18624
Grafana 5.3.1 has XSS via a column style on the "Dashboard Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...
CVE-2018-18624
Grafana 5.3.1 is affected by an XSS in the Dashboard > Table Panel (column style). This CVE-2018-18624 entry notes the issue exists due to an incomplete fix for CVE-2018-12099. Connected sources confirm this specific vector (XSS via column style) and link it to Grafana 5.3.1; no additional det...
CVE-2019-18624
Opera Mini for Android is affected by a vulnerability where an RTLO (Right to Left Override) encoding trick allows bypassing restrictions on .apk downloads/installs. Reported as CVE-2019-18624, it impacts versions 44.1.2254.142553, 44.1.2254.142659, and 44.1.2254.143214. The root cause is misinte...
Buffer overflow
DISPUTED NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 Authorization or 2 Referer HTTP header to TCP por...
CVE-2009-1227
NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 Authorization or 2 Referer HTTP header to TCP port 18624...
PT-2009-3770 · Check Point · Check Point Firewall-1
Name of the Vulnerable Software and Affected Versions: Check Point Firewall-1 PKI Web Service affected versions not specified Description: A buffer overflow issue in the PKI Web Service allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long Authorizati...