MiracleLinux 4 : httpd-2.2.15-29.0.1.AXS4 (AXSA:2013-627:04)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-627:04 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. Security issues fixed with this release: CVE-2013-1896 moddav.c in the Apache HTTP...

CVE-2022-1896

The underConstruction WordPress plugin before 1.21 does not sanitise or escape the "Display a custom page using your own HTML" setting before outputting it, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiletredhtml capability is disallowed...

CVE-2020-1896

A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2 https://github.com/facebook/hermes/commit/86543ac47e59c522976b5632b8bf9a2a4583c7d2 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that th...

CVE-2025-1896

creationtimestamp| type| source ---|---|--- 2025-03-04 02:30:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6310 2025-03-04 04:01:29+00:00| published-proof-of-concept| Telegram/G-Dgh76ejdqy6O6AaeZLOjAjPiO1ICTKm7oDwNqDwOMGvk 2025-03-04 04:07:29+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2013-1896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - moddav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial o...

CVE-2024-1896

The Photo Gallery – Responsive Photo Gallery, Image Gallery, Portfolio Gallery, Logo Gallery And Team Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.2 via deserialization via shortcode of untrusted input from the 'awllgsettings'...

openSUSE Security Advisory (SUSE-SU-2024:1896-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : squid (SUSE-SU-2024:1896-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1896-1 advisory. - CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service bsc1225417. Tenable has extracted...

Amazon Linux AMI : samba (ALAS-2023-1896)

The version of samba installed on the remote host is prior to 4.10.16-24.68. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1896 advisory. When doing NTLM authentication, the client sends replies tocryptographic challenges back to the server. These repliesha...

K14733: Apache HTTP server vulnerability CVE-2013-1896

Security Advisory Description moddav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service segmentation fault via a MERGE request in which the URI is configured for handling by the moddavs...

Amazon Linux 2 : python3 (ALAS-2022-1896)

The version of python3 installed on the remote host is prior to 3.7.15-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1896 advisory. 2025-02-11: CVE-2021-28861 was added to this advisory. A flaw was found in python. In algorithms with quadratic time...

Security Bulletin: Potential Security exposure in IBM HTTP Server CVE-2013-1896 PM89996

Abstract Potential Security exposure in IBM HTTP Server for WebSphere Application Server Content VULNERABILITY DETAILS: CVE ID:CVE-2013-1896 DESCRIPTION: IBM HTTP Server may be vulnerable to a denial of service, caused by a malicious request when using the optional moddav module. CVSS: CVSS Base...

CVE-2022-1896

The underConstruction WordPress plugin before 1.21 does not sanitise or escape the "Display a custom page using your own HTML" setting before outputting it, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiletredhtml capability is disallowed...

CVE-2022-1896

The CVE-2022-1896 entry concerns the WordPress underConstruction plugin pre-1.21. The vulnerability arises because the setting “Display a custom page using your own HTML” is not sanitized/escaped before output, allowing stored Cross-Site Scripting by high-privilege users even when unfiltered_html...

CVE-2022-1896 underConstruction < 1.21 - Admin+ Stored Cross-Site Scripting

The underConstruction WordPress plugin before 1.21 does not sanitise or escape the "Display a custom page using your own HTML" setting before outputting it, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiletredhtml capability is disallowed...

Slackware: Security Advisory (SSA:2013-218-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0231)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1896

The CVE-2021-1896 entry concerns Qualcomm Qualcomm Snapdragon components (Compute and Connectivity) with a weak WLAN configuration that could forward unencrypted packets between peers. Available sources from NVD and Red Hat, PRION, PT Security and others indicate the vulnerability affects Snapdra...

SUSE: Security Advisory (SUSE-SU-2014:1082-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:1896-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...