CVE-2013-1932

CVE-2013-1932 affects MantisBT 1.2.13. The OpenVAS entries and NVD description confirm a cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) that allows remote authenticated users to inject arbitrary script/HTML via the project name. The Nessus NASL i...

CVE-2019-1932

creationtimestamp| type| source ---|---|--- 2019-07-06 05:00:04+00:00| seen| https://t.me/cveNotify/281...

CVE-2019-1932

The CVE-2019-1932 issue affects Cisco AMP for Endpoints (Windows). The vulnerability arises from insufficient validation of dynamically loaded modules, enabling a local authenticated attacker with administrator privileges to place a file in a specific Windows path and execute code with the AMP se...

CVE-2019-1932 Cisco Advanced Malware Protection for Endpoints Windows Command Injection Vulnerability

A vulnerability in Cisco Advanced Malware Protection AMP for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerability is due to insufficient validation of dynamically loaded modules. An attacker could exploit thi...

CVE-2018-1932

IBM API Connect 5.0.0.0–5.0.8.4 is affected by a vulnerability in the role‑based access control of the management server that could allow an authenticated user to obtain highly sensitive information. The CVSS 3.0 vector is CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N with a base score of 4.9 (MED...

Security Bulletin: API Connect is affected by a vulnerability in the role-based access control (CVE-2018-1932)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1932 DESCRIPTION: IBM API Connect is affected by a vulnerability in the role-based access control in the management server that could allow an authenticated user to obtain highly sensitive...

Security Bulletin: A security vulnerability has been identified in IBM Business Process Manager and IBM HTTP Server shipped with IBM Cloud Orchestrator (CVE-2015-1932, CVE-2015-4938)

Summary A security vulnerability has been identified in IBM Business Process Manager and IBM HTTP Server shipped with IBM Cloud Orchestrator CVE-2015-1932, CVE-2015-4938. Vulnerability Details IBM Business Process Manager and IBM HTTP Server are shipped with IBM Cloud Orchestrator. CVEID:...

Security Bulletin: A security vulnerability has been identified in IBM Business Process Manager, IBM HTTP Server, IBM SmartCloud Cost Management and IBM Tivoli Monitoring shipped IBM Cloud Orchestrator Enterprise (CVE-2015-1932, CVE-2015-4938)

Summary A security vulnerability has been identified in IBM Business Process Manager, IBM HTTP Server, IBM SmartCloud Cost Management and IBM Tivoli Monitoring shipped IBM Cloud Orchestrator Enterprise Edition CVE-2015-1932, CVE-2015-4938. Vulnerability Details IBM Business Process Manager, IBM...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Tivoli Usage and Accounting Manager/SmartCloud Cost Management. (CVE-2015-1932)

Summary WebSphere Application Server is shipped as a component of Tivoli Usage and Accounting Manager / SmartCloud Cost Management. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. CVE-2015-1932 Vulnerability Details Plea...

CVE-2017-1932

...

CVE-2017-1932

CVE-2017-1932 entry is rejected/not used and does not represent an active vulnerability.

IBM WebSphere Application Server 7.0 < 7.0.0.39 Multiple Vulnerabilities (FREAK)

Binary data 9700.prm...

Oracle: Security Advisory (ELSA-2009-1123)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1932

CVE-2015-1932 affects IBM WebSphere Application Server and WebSphere Virtual Enterprise; versions affected include WAS 7.x prior to 7.0.0.39, WAS 8.0.x prior to 8.0.0.11, WAS 8.5.x prior to 8.5.5.7 and WebSphere Virtual Enterprise on WAS 7/8.0/8.5.0.x prior to respective fix packs. Root cause is ...

Fedora 20 : python-pillow-2.2.1-7.fc20 (2014-14883)

Security fix for CVE-2014-3007, updated fix for CVE-2014-1932. Followup fix for CVE-2014-1933. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora Update for python-pillow FEDORA-2014-14980

Check the version of python-pillow SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868509";...

Updated python-imaging and python-pillow packages fix security vulnerability

Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters, due to an incomplete fix for CVE-2014-1932 CVE-2014-3007...

SuSE 11.3 Security Update : python-imaging (SAT Patch Number 9153)

This python-imaging update fixes the following two security issues : - Fixed insecure temporary file creation and handling CVE-2014-1932 / CVE-2014-1933. bnc863541 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE ...

Mandriva Linux Security Advisory : python-imaging (MDVSA-2014:082)

Updated python-imaging packages fix security vulnerabilities : Jakub Wilk discovered that temporary files were insecurely created via mktemp in the IptcImagePlugin.py, Image.py, JpegImagePlugin.py, and EpsImagePlugin.py files of Python Imaging Library. A local attacker could use this flaw to...

[USN-2168-1] Python Imaging Library vulnerabilities

========================================================================== Ubuntu Security Notice USN-2168-1 April 15, 2014 python-imaging vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...