96 matches found
CVE-2022-3418
CVE-2022-3418 affects the WordPress plugin WP All Import, pre-3.6.9, where improper filtering of allowed import file extensions enables administrators in multisite WordPress installations to upload arbitrary files, potentially leading to remote code execution (RCE). Some sources explicitly descri...
CVE-2022-3418 WP All Import < 3.6.9 - Admin+ Arbitrary File Upload to RCE
The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported on the server, which could allow administrators in multi-site WordPress installations to upload arbitrary files...
CVE-2021-3418 affecting package grub2 for versions less than 2.06~rc1-7
CVE-2021-3418 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...
SUSE: Security Advisory (SUSE-SU-2015:1025-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3418 affecting package grub2 2.06~rc1-10
CVE-2021-3418 affecting package grub2 2.06rc1-10. A patched version of the package is available...
SUSE: Security Advisory (SUSE-SU-2015:1127-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Photon OS 2.0: Grub2 PHSA-2021-2.0-0334
An update of the grub2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0334. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148339...
CVE-2021-3418
creationtimestamp| type| source ---|---|--- 2021-03-16 01:29:35+00:00| seen| https://t.me/cibsecurity/24938...
CVE-2021-3418
If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction...
CVE-2021-3418
If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction...
CVE-2021-3418
CVE-2021-3418 affects GRUB2 where, if certificates that sign GRUB are installed into the database, GRUB can boot any kernel without signature validation. The booted kernel may believe it is in Secure Boot lockdown, potentially allowing tampering. Affected: GRUB2 before 2.06 (including upstream an...
CVE-2021-3418
If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction...
CVE-2021-3418
If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction...
Photon OS 3.0: Grub2 PHSA-2021-3.0-0202
An update of the grub2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0202. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146996;...
CVE-2021-3418
If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction...
CVE-2020-3418
CVE-2020-3418 affects Cisco IOS XE Wireless Controller Software for the Catalyst 9000 family (Catalyst 9800 series). Root cause: incomplete access control list (ACL) applied before RUN state, allowing an unauthenticated adjacent attacker to send ICMPv6 traffic by connecting to the SSID. Impact de...
Microsoft Guidance for Addressing Security Feature Bypass in GRUB
Executive Summary Microsoft is aware of a vulnerability in the GRand Unified Boot Loader GRUB, commonly used by Linux. This vulnerability, known as “There’s a Hole in the Boot”, could allow for Secure Boot bypass. To exploit this vulnerability, an attacker would need to have administrative...
CVE-2019-3418
The CVE-2019-3418 entry concerns the ZTE ZXHN F670 family. A cross-site scripting (XSS) vulnerability exists due to incomplete input validation, affecting all versions up to V1.1.10P3T18. An authorized user can trigger the vulnerability to execute malicious scripts (impact: client-side code execu...