144 matches found
CVE-2024-1929
creationtimestamp| type| source ---|---|--- 2024-03-07 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10102...
CVE-2023-1929
creationtimestamp| type| source ---|---|--- 2023-04-07 00:27:26+00:00| seen| https://t.me/cibsecurity/61607...
CVE-2023-1929
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to pur...
CVE-2023-1929
The CVE-2023-1929 entry concerns the WordPress WP Fastest Cache plugin, affected through versions up to 1.1.2. The root cause is a missing capability check in the wpfc_purgecache_varnish_callback function, enabling authenticated subscribers to purge the varnish cache. This leads to unauthorized d...
CVE-2023-1929 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to pur...
SUSE CVE-2012-1929
Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page content to be displayed outside of the intended content area...
Amazon Linux 2 : autotrace, autotrace-devel (ALAS-2023-1929)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1929 advisory. Heap-based buffer overflow in the pstoeditsuffixtableinit function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to cause a denial of service out-of-bounds write via a crafted...
Security Bulletin: Multiple Security Vulnerabilities in IBM Tivoli Storage Manager FastBack
Summary IBM Tivoli Storage Manager FastBack is affected by multiple security vulnerabilities such as stack based buffer overflow, command injection and remote code execution. These vulnerabilities may cause the server to crash, elevate privileges, or disclose information. Vulnerability Details...
Security Bulletin: IBM Tivoli Storage Manager FastBack Stack-Based Buffer Overflow Vulnerability (CVE-2015-1929)
Summary The IBM Tivoli Storage Manager FastBack Server process is vulnerable to a stack-based buffer overflow. A network attacker could overflow a buffer and cause the server to crash. Vulnerability Details CVEID: CVE-2015-1929 DESCRIPTION: IBM Tivoli Storage Manager FastBack Server is vulnerable...
CVE-2022-1929
An exponential ReDoS Regular Expression Denial of Service can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method...
CVE-2022-1929
CVE-2022-1929 affects the npm package devcert. Affected component: the certificateFor function and the underlying regex patterns for VALID_IP/VALID_DOMAIN, leading to an exponential ReDoS (Denial of Service) when attacker-controlled input is provided. Public sources describe a denial of service a...
NULL Pointer Dereference
Description There is a NULL Pointer Dereference in mrbvmexec vm.c:1929. This bug has been found on mruby lastest commit hash c2f7ed514dfa0fcae2e7e72d51f25be3d3d6d72c on Ubuntu 20.04 for x8664/amd64. Proof of Concept 1- Clone repo and build with ASAN using MRUBYCONFIG=buildconfig/clang-asan.rb rak...
CVE-2021-1929
creationtimestamp| type| source ---|---|--- 2021-09-08 16:28:30+00:00| seen| https://t.me/cibsecurity/28425...
CVE-2021-1929
The provided documents confirm CVE-2021-1929 affects Qualcomm Snapdragon components due to a lack of strict validation of bootmode, enabling potential information disclosure. The NVD entry lists impact as information disclosure with a LOCAL attack vector and LOW to MEDIUM severity depending on th...
Advisory ROSA-SA-2021-1929
Software: net-snmp 5.7.2 OS: Cobalt 7.9 CVE-ID: CVE-2014-2284 CVE-Crit: HIGH CVE-DESC: The Linux implementation of ICMP-MIB in Net-SNMP 5.5 through 5.5.2.1, 5.6.x through 5.6.2.1, and 5.7.x through 5.7.2.1 incorrectly validates input, allowing remote attackers to cause a denial of service via...
SUSE: Security Advisory (SUSE-SU-2021:1929-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1473-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : chromium (openSUSE-2020-1929)
This update for chromium fixes the following issues : Update to 86.0.4240.198 boo1178703 - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 boo1178630 - CVE-2020-16016: Inappropriate implementation in base. C Tenable...
CVE-2020-1929
The CVE-2020-1929 entry concerns the Apache Beam MongoDB connector. Affected versions 2.10.0–2.16.0 expose an option to disable SSL trust verification, but the configuration is not respected and disables trust verification in all cases. This exclusion is registered globally, affecting any code ru...
openSUSE Security Update : LibreOffice (openSUSE-2019-1929)
This update for libreoffice and libraries fixes the following issues : LibreOffice was updated to 6.2.5.2 fate327121 bsc1128845 bsc1123455, bringing lots of bug and stability fixes. Additional bugfixes : - If there is no firebird engine we still need java to run hsqldb bsc1135189 - PPTX: Rectangl...