CVE-2024-2227

This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces JSF 2.2.20 documented in CVE-2020-6950. The remediation for this vulnerability contained in this security fix provides additional changes to the...

CVE-2024-2227 IdentityIQ JavaServer Faces File Path Traversal Vulnerability

This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces JSF 2.2.20 documented in CVE-2020-6950. The remediation for this vulnerability contained in this security fix provides additional changes to the...

Rocky Linux 8 : go-toolset:rhel8 (RLSA-2021:3585)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:3585 advisory. - Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which in some situations allows attackers to bypa...

CVE-2023-3585

Mattermost Boards contains a vulnerability where board links are not properly validated. The underlying cause is improper validation of a board link, enabling an attacker to crash a channel by posting a specially crafted boards link. The CVE entry notes a medium severity (CVSS v3.1 base score 4.3...

CVE-2023-3585 channel DoS by sharing a boards link

Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link...

CVE-2023-3585 channel DoS by sharing a boards link

Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link...

Oracle Linux 9 : python3.11 (ELSA-2023-3585)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3585 advisory. 3.11.2-2.1 - Security fix for CVE-2023-24329 Resolves: rhbz2173917 Tenable has extracted the preceding description block directly from the Oracle Linux security...

CVE-2022-3585

A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contactus of the component Contact Us. The manipulation leads to cross-site request forgery. It is possible to launch the...

CVE-2022-3585

This CVE-2022-3585 affects SourceCodester Simple Cold Storage Management System 1.0. The vulnerability is a cross-site request forgery arising from an unknown function in the file /csms/?page=contact_us under the Contact Us component. It can be exploited remotely and the exploit has been disclose...

CVE-2021-3585

creationtimestamp| type| source ---|---|--- 2022-08-26 20:30:46+00:00| seen| https://t.me/cibsecurity/48905...

CVE-2021-3585

CVE-2021-3585 affects openstack-tripleo-heat-templates. The issue is that plain passwords from RHSM are logged during OSP13 deployment with subscription-manager, exposing sensitive credentials locally. CVSS-3.1 base score 5.5 (Medium) with Local attack vector, low complexity, and confidentiality ...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2021-3585)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-3585 advisory. go-toolset 1.15.14-2 - Revert to Go 1.15.14 - Related: rhbz1995126 - Reverts: rhbz1994087 1.15.15-1 - Rebase to Go 1.15.15 - Resolves: rhbz1994087 - Add reject...

SUSE: Security Advisory (SUSE-SU-2020:3585-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3585

creationtimestamp| type| source ---|---|--- 2020-10-21 22:57:23+00:00| seen| https://t.me/cibsecurity/15505...

CVE-2020-3585 Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

CVE-2020-3585

The CVE-2020-3585 issue affects Cisco ASA/FTD software for Cisco Firepower 1000 Series and is due to improper countermeasures against the Bleichenbacher RSA-TLS vulnerability in the TLS handler. An unauthenticated remote attacker could exploit crafted TLS messages to make the device act as an ora...

McAfee VirusScan Enterprise < 8.8 Patch 15 Multiple Vulnerabilities (SB10302)

The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 15. It is, therefore, affected by multiple vulnerabilites: - Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14...

CVE-2019-3585

creationtimestamp| type| source ---|---|--- 2020-06-10 16:55:06+00:00| seen| https://t.me/cibsecurity/12642...

CVE-2019-3585

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges...

CVE-2019-3585 VSE Escalation of Privileges through Alert pop-up window

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges...