Display Virtualization for Windows OS Advisory

Summary: A potential security vulnerability in some Display Virtualization for Windows OS driver software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-36510 Description: Improper buffer restrictio...

ECHO-2119-1036-9B87

Bulletin has no description...

MiracleLinux 4 : samba4-4.2.10-7.AXS4 (AXSA:2016-577:04)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-577:04 advisory. Samba is the standard Windows interoperability suite of programs for Linux and Unix. Security issues fixed with this release: CVE-2016-2119...

EUVD-2026-2119

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2019-2119

In multiple functions of keystoreservice.cpp, there is a possible Information Disclosure due to improper locking. This could lead to local information disclosure of protected data with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

Debian: Security Advisory (DLA-4227-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-2119

creationtimestamp| type| source ---|---|--- 2025-03-09 09:39:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6962 2025-03-09 09:50:50+00:00| seen| https://bsky.app/profile/potato.software/post/3ljwr77xlym2o 2025-03-09 10:38:05+00:00| seen|...

CVE-2025-2119

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...

CVE-2025-2119

The CVE-2025-2119 entry concerns Thinkware Car Dashcam F800 Pro (up to 20250226). A vulnerability in the Device Registration Handler allows use of default credentials, enabling an attack on the physical device. Reported impact is limited to credential misuse with low attack complexity (though use...

CVE-2025-2119 Thinkware Car Dashcam F800 Pro Device Registration default credentials

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...

Linux Distros Unpatched Vulnerability : CVE-2022-2119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OFFIS DCMTK's All versions prior to 3.6.7 service class provider SCP is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary...

CVE-2024-2119 LuckyWP Table of Contents <= 2.1.5 - Reflected Cross-Site Scripting

The LuckyWP Table of Contents plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the attrs parameter in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2024-2119 LuckyWP Table of Contents <= 2.1.5 - Reflected Cross-Site Scripting

The LuckyWP Table of Contents plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the attrs parameter in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

WordPress LuckyWP Table of Contents Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

Software LuckyWP Table of Contents Type Plugin Vulnerable versions = 2.1.5 Fixed in 2.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2119 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fd6e9deb644b Credits Lucio Sá...

Oracle Linux 9 : Image / builder / components (ELSA-2024-2119)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2119 advisory. osbuild 110-1 - New upstream release 109-1 - New upstream release 106-1 - New upstream release 105-1 - New upstream release 104-2 - Fix unit tests in RHEL CI by...

RHEL 9 : Image builder components (RHSA-2024:2119)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2119 advisory. Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Security...

openSUSE: Security Advisory for dcmtk (openSUSE-SU-2023:0108-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : tcpdump (ALAS-2023-2119)

The version of tcpdump installed on the remote host is prior to 4.9.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2119 advisory. The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 3, a different...

WordPress Responsive Filterable Portfolio Plugin < 1.0.20 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Filterable Portfolio Type Plugin Vulnerable versions 1.0.20 Fixed in 1.0.20 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2119 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID fdef3fcbfd28 Credits Marco...

CVE-2023-2119

CVE-2023-2119 : The WordPress plugin Responsive Filterable Portfolio (versions ≤ 1.0.19) is affected by a Reflected XSS via the search_term parameter due to insufficient input sanitization and output escaping. The vulnerability permits unauthenticated attackers to inject scripts into pages that e...