132 matches found
CentOS 8 : targetcli (CESA-2020:1933)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1933 advisory. - targetcli: world writable /var/run/targetclid.sock allows unprivileged user to execute commands CVE-2020-10699 Note that Nessus has not tested for this issue...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-1532)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1933
creationtimestamp| type| source ---|---|--- 2020-01-28 08:37:56+00:00| seen| https://t.me/cveNotify/505...
CVE-2020-1933
A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers...
CVE-2020-1933
CVE-2020-1933 describes a cross-site scripting (XSS) vulnerability in Apache NiFi, affecting versions 1.0.0 through 1.10.0. According to the provided documents, the issue allows an authenticated user to inject malicious scripts into the UI via actions performed in Firefox; other browsers do not a...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2019-2701)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2019-2437)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for cronie (EulerOS-SA-2019-1933)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP2 : python-pillow (EulerOS-SA-2019-2437)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size...
CVE-2011-1933
creationtimestamp| type| source ---|---|--- 2019-11-27 00:31:16+00:00| seen| https://t.me/cibsecurity/8351...
CVE-2011-1933
SQL injection vulnerability in Jifty::DBI before 0.68...
CVE-2011-1933
SQL injection vulnerability in Jifty::DBI before 0.68...
CVE-2011-1933
The CVE-2011-1933 issue affects Jifty::DBI prior to version 0.68, per multiple sources in connected documents, describing a SQL injection vulnerability in Jifty::DBI. The root cause is unsafe construction/handling of SQL queries within Jifty::DBI, enabling an attacker to manipulate SQL commands. ...
CVE-2011-1933
SQL injection vulnerability in Jifty::DBI before 0.68...
Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics (CVE-2018-3180, CVE-2013-1624, CVE-2018-1933, CVE-2015-1832, CVE-2018-15494)
Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Planning Analytics 2.0.7. There is a vulnerability in IBM® Runtime Environment Java™ used by IBM Planning Analytics 2.0.6 and lower. IBM Planning Analytics 2.0.7 has addressed the applicable CVE by...
CVE-2019-1933
creationtimestamp| type| source ---|---|--- 2019-07-06 05:00:04+00:00| seen| https://t.me/cveNotify/282...
CVE-2019-1933
Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) contains an input-validation vulnerability in its email message scanning that can let an unauthenticated, remote attacker bypass configured message filters by sending a crafted email to an ESA-protected recipient. The issue stems fro...
CVE-2018-1933
IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153177...
CVE-2018-1933
CVE-2018-1933 affects IBM Planning Analytics 2.0 through 2.0.6, with a cross-site scripting vulnerability in the Web UI that could allow an attacker to inject JavaScript and potentially disclose credentials within a trusted session. The IBM Security Bulletin notes remediation in IBM Planning Anal...
