15 matches found
CVE-2024-28345
An issue discovered in Sipwise C5 NGCP Dashboard below mr11.5.1 allows a low privileged user to access the Journal endpoint by directly visit the URL...
CVE-2022-28345
The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders RTLO encoded URLs beginning with a non-breaking space, when there is a hash character in the URL. This technique allows a remote unauthenticated attacker to send legitimate looking links, appearing t...
CVE-2020-28345
An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200025 November 2020...
CVE-2023-28345
An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application exposes the teacher's Console password in cleartext via an API endpoint accessible from localhost. Attackers with physical access to the Teacher Console can open a web browser, navigate to t...
CVE-2023-28345
CVE-2023-28345 affects Faronics Insight 10.0.19045 on Windows, where the Insight Teacher Console exposes the teacher’s password in cleartext via a localhost API endpoint. An attacker with physical access can open a browser, access the endpoint, and obtain the password, enabling login to the Teach...
CVE-2022-28345
creationtimestamp| type| source ---|---|--- 2022-04-15 12:19:51+00:00| seen| https://t.me/cibsecurity/40846 2022-04-15 22:53:32+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1940 2022-04-15 23:44:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5812...
CVE-2022-28345
The CVE-2022-28345 issue affects the Signal iOS app prior to version 5.34, where RTLO-injected, RTLO-encoded URLs beginning with an unbroken space (in the presence of a hash segment) can be rendered to resemble legitimate sites. An unauthenticated remote attacker could exploit this to spoof links...
CVE-2021-28345
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2021-28345 Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
CVE-2021-28345
Technical details about CVE-2021-28345 are not provided in the supplied documents. The entries reference multiple Windows vulnerabilities but do not specify affected components, impact, or fixes for this CVE. Monitor for updates.
KB5001342: Windows 10 version 1809 / Windows Server 2019 Security Update (Apr 2021)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...
KB5001389: Windows Server 2008 Security Update (Apr 2021)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - Windows Kernel Information Disclosure Vulnerability CVE-2021-27093, CVE-2021-28309 - Windows Media...
KB5001347: Windows 10 version 1607 / Windows Server 2016 Security Update (Apr 2021)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Microsoft Internet Messaging API Remote Code...
CVE-2020-28345
An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200025 November 2020...
CVE-2020-28345
CVE-2020-28345 affects LG mobile devices running Android 10. The issue is in the Wi‑Fi subsystem, where a missing NULL parameter check can cause a crash. This is described in multiple sources (e.g., NVD/Red Hat entries) with no public details on a fix in the provided documents. Impact is indicate...