CVE-2021-2130

CVE-2021-2130 affects Oracle VM VirtualBox (Core) before version 6.1.18. The vulnerability allows a high-privilege local attacker to cause a hang or crash of VirtualBox (DoS). Exploitation details are not provided in the supplied documents. Remediation: upgrade to VirtualBox 6.1.18 or later (upst...

CVE-2020-2130

CVE-2020-2130 concerns the Jenkins Harvest SCM Plugin (versions ≤ 0.5.1), where passwords are stored unencrypted in the Jenkins master configuration. The vulnerability, documented across multiple sources (GHSA and OSV/NVD records), states that credentials are kept in plaintext in the global confi...

CVE-2012-2130

creationtimestamp| type| source ---|---|--- 2019-12-06 20:48:09+00:00| seen| https://t.me/cibsecurity/8554 2024-03-07 21:41:28+00:00| seen| https://t.me/ctinow/202807...

CVE-2012-2130

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys...

CVE-2012-2130

CVE-2012-2130 affects PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption issue in DH and RSA key generation, leading to a Security Bypass. Public advisories (SUSE, UBuntu, Gentoo GLSA 201310-10, Gentoo NASL) confirm the same vector and impact across multiple distributions. The root cause is...

CVE-2019-2130

CVE-2019-2130 affects Android: the issue is in CompilationJob::FinalizeJob of compiler.cc, caused by type confusion that can enable remote code execution with no user interaction. Exploitation could escalate privileges via a crafted malicious proxy configuration. Affected Android versions include...

CVE-2019-2130

...

CVE-2018-2130

CVE-2018-2130 is rejected/not used per the initial description; it does not represent an active vulnerability entry.

CVE-2018-2130

...

CVE-2016-2130

This CVE-2016-2130 entry is rejected/not used, per the initial description.

CVE-2015-2130

...

CVE-2016-2130

...

CVE-2017-2130

CVE-2017-2130 affects PhishWall Client Internet Explorer (versions up to 3.7.13). The issue is an untrusted search path in the installer that can allow a Trojan‑horse DLL to be loaded from an unspecified directory, enabling privilege escalation to the user’s privileges. Impact described as arbitr...

Gentoo Security Advisory GLSA 201412-31

Gentoo Linux Local Security Checks GLSA 201412-31 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

ZNC WebAdmin Multiple NULL Pointer Dereference Denial of Service Vulnerabilities

ZNC is prone to multiple remote denial-of-service vulnerabilities. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:znc:znc...

CVE-2014-2130

CVE-2014-2130 is a Cisco ACS (Secure Access Control Server) vulnerability caused by an unintentional default Tomcat administration web interface. An authenticated, remote attacker could access the Tomcat admin interface, modify ACS application and web interface configuration files, and thereby ex...

Mandriva Linux Security Advisory : znc (MDVSA-2015:013)

Updated znc packages fix security vulnerabilities : Multiple vulnerabilities were reported in ZNC version 1.0 which can be exploited by malicious authenticated users to cause a denial of service. These flaws are due to errors when handling the editnetwork, editchan, addchan, and delchan page...

GLSA-201412-31 : ZNC: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-31 ZNC: Denial of Service Multiple NULL pointer dereferences have been found in ZNC. Impact : A remote attacker could send a specially crafted request, possibly resulting in a Denial of Service condition. Workaround : There...

Multiple Vulnerabilities in Draytek Vigor 2130

VIGOR 2130 firmware 1.5.4.9 1.1. Command injection in traceroute functionality A user can execute arbitrary commands RCE on the router by abusing the traceroute functionality. The interface expects an IP address as input, but does not validate the input. Just provide the input: ; id The above...

VIGOR 2130 Command Injection / Cross Site Request Forgery

VIGOR 2130 firmware 1.5.4.9 1.1. Command injection in traceroute functionality A user can execute arbitrary commands RCE on the router by abusing the traceroute functionality. The interface expects an IP address as input, but does not validate the input. Just provide the input: ; id The above...