Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1995)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1995 advisory. The incremental HTML parser html.parser.HTMLParser allows for CPUdenial-of-service through repeated unterminated markup declarations whenprocessing uncontrolled data. CVE-2026-15308 In the...

CVE-2026-1995

creationtimestamp| type| source ---|---|--- 2026-03-27 12:55:52+00:00| seen| https://bsky.app/profile/oxfemale.bsky.social/post/3mi264ootpj22 2026-03-29 05:15:56+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mi6fe3r6es2g...

CVE-2023-1995

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before...

Linux Distros Unpatched Vulnerability : CVE-2013-1995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign...

CVE-2024-1995

The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relationalpostssearch function in all versions up to, and including, 4.2.2. This makes it possible for authenticated attackers, with subscrber-level access and above,...

CVE-2024-1995

CVE-2024-1995 : The Smart Custom Fields WordPress plugin insecurely exposes post content due to a missing capability check in relational_posts_search() in all versions up to and including 4.2.2. This allows authenticated users with Subscriber+ privileges to retrieve password‑protected or private ...

CVE-2023-1995

creationtimestamp| type| source ---|---|--- 2023-08-29 07:17:16+00:00| seen| https://t.me/cibsecurity/69343...

CVE-2023-1995

CVE-2023-1995 pertains to an Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, and HiRDB Structured Data Access Facility. Affected versions include HiRDB Server prior to 09-60-39, 09-65-23, 09-66-17, 10-01-10, 10-03-12, 10-04-06, 10-05-06, 10-06-02;...

Debian: Security Advisory (DSA-1995-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MSC-2022-1995

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

CVE-2022-1995

CVE-2022-1995 affects the WordPress plug-in “Malware Scanner” (miniOrange) prior to version 4.5.2. The issue arises because the plug-in does not sanitize and escape certain settings, allowing Highly privileged administrators to store malicious JavaScript, leading to client-side XSS when unfiltere...

SUSE: Security Advisory (SUSE-SU-2013:1103-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0881-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:1103-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1995

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic...

CVE-2021-1995

CVE-2021-1995 affects Oracle WebLogic Server (Oracle Fusion Middleware) - Web Services component. Connected sources confirm affected versions: 10.3.6.0.0 and 12.1.3.0.0. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise WebLogic Server, potentially en...

Palo Alto Networks PAN-OS 9.1.x < 9.1.2 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 9.1.x prior to 9.1.2. It is, therefore, affected by a vulnerability. - A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon...

CVE-2020-1995

CVE-2020-1995 affects Palo Alto Networks PAN-OS 9.1.x before 9.1.2. Description: a NULL pointer dereference in the rasmgr daemon allows an authenticated administrator to trigger a crash by sending a crafted request, leading to DoS of PAN-OS services as the device reboots into maintenance mode. Im...

CVE-2019-1995

CVE-2019-1995 affects Android (versions 7.0–9) in the ComposeActivityEmail class. The flaw enables a "confused deputy" scenario where an app could silently attach files to an outgoing email, causing local information disclosure and potentially sending files accessible to AOSP Mail to a remote rec...

Security Bulletin: IBM QRadar Incident Forensics is vulnerable to a cross site scripting attack. (CVE-2015-1995)

Summary Several locations in QRadar Incident Forensics could allow attackers to insert JavaScript thus modifying the UI functionality. Vulnerability Details CVE-ID: CVE-2015-1995 Description: IBM QRadar Incident Forensics is vulnerable to cross-site scripting, caused by improper validation of...