CVE-2021-2128

creationtimestamp| type| source ---|---|--- 2021-01-20 18:40:50+00:00| seen| https://t.me/cibsecurity/22412...

CVE-2021-2128

CVE-2021-2128 affects Oracle VM VirtualBox (Core) with affected versions before 6.1.18. The advisory states that a low-privilege attacker with logon to the infrastructure running VirtualBox can compromise the product, potentially leading to unauthorized access to data or data exfiltration across ...

Debian: Security Advisory (DLA-2128-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2128

CVE-2020-2128 affects the Jenkins ECX Copy Data Management Plugin (versions ≤ 1.9). The root cause is passwords stored unencrypted in job config.xml on the Jenkins master. This allows disclosure to users with Extended Read permissions or to anyone with master filesystem access. The provided docum...

CVE-2019-2128

In ACELP4t64fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1...

CVE-2019-2128

CVE-2019-2128 is an elevation-of-privilege vulnerability in Android’s Media/ACELP code path. The issue is an out-of-bounds write in ACELP_4t64_fx (c4t64fx.c) caused by a missing bounds check, enabling local privilege escalation without extra execution privileges. Affected products include Android...

CVE-2018-2128

...

CVE-2018-2128

CVE-2018-2128 is rejected/not used and does not represent an active vulnerability entry.

Oracle Linux 7 : gdm / and / gnome-session (ELSA-2017-2128)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2128 advisory. gdm 3.22.3-11 - Add japanese translation Resolves: 1449632 3.22.3-10 - Add patches to try to maintain some semblance of compatibility when live upgrading betwee...

CVE-2016-2128

...

CVE-2015-2128

CVE-2015-2128 is rejected/not used; this candidate does not represent an active vulnerability entry.

CVE-2016-2128

This CVE-2016-2128 entry is rejected/not used and does not represent an active vulnerability.

CVE-2015-2128

...

CVE-2017-2128

Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data...

CVE-2017-2128

The CVE-2017-2128 entry relates to the IPA’s Security guide for website operators, where loading specially crafted saved data can cause arbitrary OS command execution (CWE-78). Root cause is an issue in loading saved data that enables command execution; the affected component is the Security guid...

CVE-2017-2128

Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data...

Important: Red Hat Security Advisory: kernel security and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Oracle: Security Advisory (ELSA-2013-1051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Shockwave Player <= 11.5.9.620 (APSB11-17) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.5.9.620 or earlier. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption vulnerabilities affect the 'Dirapi.dll' component that can result in arbitrary code execution. CVE-2011-0317,...

Joomla Component com_jequoteform Local File Inclusion (CVE-2010-2128)

A file inclusion vulnerability has been reported in Joomla Com Jequoteform. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...