98 matches found
CVE-2023-24528
creationtimestamp| type| source ---|---|--- 2023-02-14 07:30:20+00:00| seen| https://t.me/cibsecurity/58051...
CVE-2023-24528
SAP Fiori apps for Travel Management in SAP ERP My Travel Requests - version 600, allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of...
CVE-2023-24528
CVE-2023-24528 affects SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) version 600. The vulnerability arises from a misconfigured application endpoint that is exposed over the network, enabling an authenticated attacker to view sensitive data (e.g., travel documents). The iss...
CVE-2022-24528
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2022-24528
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2022-24528
CVE-2022-24528 is a Remote Code Execution vulnerability in Windows RPC Runtime. It is a network-exposed issue affecting the Windows RPC runtime, with a high-severity impact (C/H/I/A: high) per CVSS v3.1 (8.8) and a medium base score (6.8) in CVSS v2. The CVSS v3.1 vector indicates network access,...
Critical Remote Code Execution Vulnerabilities in Windows RPC Runtime
Microsoft’s April 2022 Patch Tuesday introduced patches to more than a hundred new vulnerabilities in various components. Three critical vulnerabilities were found and patched in Windows RPC Remote Procedure Call runtime: CVE-2022-24492 and CVE-2022-24528 discovered by Yuki Chen with Cyber KunLun...
KB5012632: Windows Server 2008 Security Update (April 2022)
The remote Windows host is missing security update 5012632 or cumulative update 5012658. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
KB5012653: Windows 10 version 1507 LTS Security Update (April 2022)
The remote Windows host is missing security update 5012653. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-26798, CVE-2022-26801, CVE-2022-26786, CVE-2022-24549, CVE-2022-26794,...
KB5012670: Windows 8.1 and Windows Server 2012 R2 Security Update (April 2022)
The remote Windows host is missing security update 5012639 or cumulative update 5012670. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24474, CVE-2022-24481, CVE-2022-24494,...
KB5012666: Windows Server 2012 Security Update (April 2022)
The remote Windows host is missing security update 5012666 or cumulative update 5012650. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2021-24528
creationtimestamp| type| source ---|---|--- 2021-08-30 18:32:21+00:00| seen| https://t.me/cibsecurity/28003...
CVE-2021-24528
The CVE-2021-24528 entry concerns FluentSMTP for WordPress (versions before 2.0.1). The vulnerability is an authenticated stored XSS: the plugin fails to sanitize inputs when storing settings and fails to escape values when displaying SMTP settings, enabling stored XSS for users who can manage pl...
CVE-2021-24528 FluentSMTP < 2.0.1 - Authenticated Stored XSS
The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SMTP settings set by this plugin, leading to a stored cross site scripting XSS vulnerability. Only...