141 matches found
CVE-2022-1891
creationtimestamp| type| source ---|---|--- 2022-07-14 09:33:43+00:00| seen| https://t.me/itsecnews/1001 2022-07-14 11:27:02+00:00| published-proof-of-concept| https://t.me/truesecator/3171 2023-01-27 00:46:57+00:00| seen| https://t.me/cibsecurity/57005 2025-04-03 17:35:53+00:00| seen|...
CVE-2013-1891
OpenCart 1.4.7–1.5.5.1 contains a directory traversal vulnerability in filemanager.php where the anti-traversal check is ineffective and can be bypassed. This affects code handling file paths, enabling potential access outside the intended directory structure. The CVE notes indicate an impact on ...
AlmaLinux 8 : libpq (ALSA-2022:1891)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:1891 advisory. - A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption...
Low: Red Hat Security Advisory: libpq security update
An update for libpq is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
SUSE: Security Advisory (SUSE-SU-2014:0372-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1891
A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon...
CVE-2021-1891
CVE-2021-1891 is a Qualcomm audio-driver use-after-free vulnerability (pointer mismanagement) impacting Snapdragon platforms (Auto/Compute/Connectivity/IoT variants). It affects the Audio component; root cause is use-after-free in the audio driver, with impact on confidentiality, integrity, and a...
SUSE: Security Advisory (SUSE-SU-2020:1891-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1891
The CVE-2020-1891 entry concerns a vulnerability in WhatsApp variants where a user-controlled parameter used during video calls could trigger an out-of-bounds write on 32-bit devices. Affected products include WhatsApp for Android (prior to v2.20.17), WhatsApp Business for Android (prior to v2.20...
CVE-2020-1891
A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices...
Adobe Acrobat Reader DC - Heap-Based Memory Corruption due to Malformed TTF Font Exploit
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=707779e0...
Adobe Acrobat Reader DC - Heap-Based Memory Corruption due to Malformed TTF Font
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=707779e0...
CVE-2019-1891
creationtimestamp| type| source ---|---|--- 2019-07-06 04:59:53+00:00| seen| https://t.me/cveNotify/271...
CVE-2019-1891
A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of requests sent to the web...
CVE-2019-1891
The CVE-2019-1891 issue affects Cisco Small Business 200/300/500 Series Managed Switches. The vulnerability stems from improper validation of web interface requests, allowing an unauthenticated, remote attacker to trigger an unexpected reload and cause a denial of service on an affected device. I...
CVE-2018-1891
Summary: CVE-2018-1891 affects IBM Security Guardium 10.0–10.5. The issue is a cross-site scripting (XSS) vulnerability in the Web UI that could let an attacker inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The NVD entry lists CVSSv3 base sco...
Gentoo Security Advisory GLSA 201407-03
Gentoo Linux Local Security Checks GLSA 201407-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Fedora Update for xen FEDORA-2015-3721
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for xen FEDORA-2014-15995
Check the version of xen SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868572";...