99 matches found
Amazon Linux 2 : thunderbird (ALAS-2023-2028)
The version of thunderbird installed on the remote host is prior to 102.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2028 advisory. 2024-01-03: CVE-2023-1999 was added to this advisory. The Mozilla Foundation describes this issue as follows:OCSP...
Ubuntu: Security Advisory (USN-2028-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2028
CVE-2022-2028 is a stored XSS vulnerability in the open-source time-tracking project titra (GitHub: kromitgmbh/titra) affecting versions prior to 0.77.0. The issue has been observed as a Stored XSS in the Project Name field (example payload provided), enabling injection when a project name is sav...
CVE-2022-2028 Cross-site Scripting (XSS) - Generic in kromitgmbh/titra
Cross-site Scripting XSS - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0...
Mageia: Security Advisory (MGASA-2013-0160)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Global cybersecurity market is poised to reach nearly $420 billion by 2028
By Owais Sultan The global cybersecurity market will reach more than $230 billion this year, and more than 30% of that estimated growth is expected in North American markets alone. This is a post from HackRead.com Read the original post: Global cybersecurity market is poised to reach nearly $420...
Rising Demand for DDoS Protection Software Market By 2020-2028
Distributed Denial of Service DDoS attack is a malicious form of attack that disrupts the regular network traffic by overwhelming the website with more traffic than the server can handle. The main aim of this kind of cyberattack is to render the website inoperable. Over recent years, these kinds ...
Oracle MySQL Server 8.0 <= 8.0.21 Security Update (cpujan2021) - Windows
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
Oracle MySQL Server 8.0 <= 8.0.21 Security Update (cpujan2021) - Linux
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
CVE-2021-2028
creationtimestamp| type| source ---|---|--- 2021-01-20 18:27:23+00:00| seen| https://t.me/cibsecurity/22344...
CVE-2021-2028
CVE-2021-2028 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.21 and earlier. Vulnerability details: a high-privilege attacker with network access via multiple protocols can cause a complete DoS by hanging or crashing the MySQL Server. This matches the initial vulnerability descri...
Palo Alto Networks PAN-OS 7.1.x < 8.1.13 / 9.0.x < 9.0.7 OS Command Injection
The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.13 or 9.0.x prior to 9.0.7. It is, therefore, affected by an OS Command Injection vulnerability in PAN-OS management server. An authenticated remote attacker can exploit this to execute arbitrary OS commands...
CVE-2020-2028
An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...
CVE-2020-2028 PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification
An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...
CVE-2020-2028
CVE-2020-2028 describes an OS command injection vulnerability in Palo Alto Networks PAN-OS management server that allows authenticated administrators to execute arbitrary commands with root privileges when uploading a new certificate in FIPS-CC mode. Affected products/versions are PAN-OS 7.1.x, a...
CVE-2018-2028
creationtimestamp| type| source ---|---|--- 2019-06-06 07:33:06+00:00| seen| https://t.me/cibsecurity/4719...
Security Bulletin: IBM Maximo Asset Management is vulnerable to Reverse Tabnabbing (CVE-2018-2028)
Summary IBM Maximo Asset Management could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive information. Vulnerability Details CVEID: CVE-2018-2028 DESCRIPTION: IBM Maximo Asset Management could allow a an...
CVE-2019-2028
CVE-2019-2028 affects Android via libmpeg2 where NEON registers aren’t preserved in multiple hand-crafted functions, enabling potential remote code execution with no privileges and requiring user interaction. Affected Android versions include 7.0–7.1.2, 8.0–8.1, and 9 (Android ID A-120644655). Pu...