101 matches found
Oracle VirtualBox Security Updates (cpujan2021) - Windows
Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...
Vulnerabilities fixed in Oracle Virtualization
Vulnerabilities have been fixed in Oracle Virtualization/Virtualbox. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...
CVE-2021-2130
creationtimestamp| type| source ---|---|--- 2021-01-20 18:37:28+00:00| seen| https://t.me/cibsecurity/22376...
CVE-2021-2130
CVE-2021-2130 affects Oracle VM VirtualBox (Core) before version 6.1.18. The vulnerability allows a high-privilege local attacker to cause a hang or crash of VirtualBox (DoS). Exploitation details are not provided in the supplied documents. Remediation: upgrade to VirtualBox 6.1.18 or later (upst...
CVE-2020-2130
CVE-2020-2130 concerns the Jenkins Harvest SCM Plugin (versions ≤ 0.5.1), where passwords are stored unencrypted in the Jenkins master configuration. The vulnerability, documented across multiple sources (GHSA and OSV/NVD records), states that credentials are kept in plaintext in the global confi...
CVE-2012-2130
creationtimestamp| type| source ---|---|--- 2019-12-06 20:48:09+00:00| seen| https://t.me/cibsecurity/8554 2024-03-07 21:41:28+00:00| seen| https://t.me/ctinow/202807...
CVE-2012-2130
A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys...
CVE-2012-2130
CVE-2012-2130 affects PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption issue in DH and RSA key generation, leading to a Security Bypass. Public advisories (SUSE, UBuntu, Gentoo GLSA 201310-10, Gentoo NASL) confirm the same vector and impact across multiple distributions. The root cause is...
CVE-2019-2130
CVE-2019-2130 affects Android: the issue is in CompilationJob::FinalizeJob of compiler.cc, caused by type confusion that can enable remote code execution with no user interaction. Exploitation could escalate privileges via a crafted malicious proxy configuration. Affected Android versions include...
CVE-2019-2130
...
CVE-2018-2130
CVE-2018-2130 is rejected/not used per the initial description; it does not represent an active vulnerability entry.
CVE-2016-2130
This CVE-2016-2130 entry is rejected/not used, per the initial description.
CVE-2017-2130
CVE-2017-2130 affects PhishWall Client Internet Explorer (versions up to 3.7.13). The issue is an untrusted search path in the installer that can allow a Trojan‑horse DLL to be loaded from an unspecified directory, enabling privilege escalation to the user’s privileges. Impact described as arbitr...
Gentoo Security Advisory GLSA 201412-31
Gentoo Linux Local Security Checks GLSA 201412-31 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
ZNC WebAdmin Multiple NULL Pointer Dereference Denial of Service Vulnerabilities
ZNC is prone to multiple remote denial-of-service vulnerabilities. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:znc:znc...
CVE-2014-2130
CVE-2014-2130 is a Cisco ACS (Secure Access Control Server) vulnerability caused by an unintentional default Tomcat administration web interface. An authenticated, remote attacker could access the Tomcat admin interface, modify ACS application and web interface configuration files, and thereby ex...
Mandriva Linux Security Advisory : znc (MDVSA-2015:013)
Updated znc packages fix security vulnerabilities : Multiple vulnerabilities were reported in ZNC version 1.0 which can be exploited by malicious authenticated users to cause a denial of service. These flaws are due to errors when handling the editnetwork, editchan, addchan, and delchan page...