54 matches found
CVE-2023-5644
creationtimestamp| type| source ---|---|--- 2023-12-26 20:26:46+00:00| seen| https://t.me/ctinow/159434 2024-01-04 21:21:49+00:00| seen| https://t.me/ctinow/163218 2024-01-19 14:11:30+00:00| seen| https://t.me/ctinow/170201...
CVE-2023-5644
The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete data that should only be accessible to Admin users...
CVE-2023-5644
The WP Mail Log WordPress plugin (versions before 1.1.3) has an insecure REST API authorization flaw. The vulnerability allows users with the Contributor role to access and delete data that should be Admin-only, due to improper endpoint authorization in the wml/v1 REST API. The impact is exposure...
CVE-2023-5644 WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints
The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete data that should only be accessible to Admin users...
Security Bulletin: Vulnerabilities found in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-5644, CVE-2019-12415, CVE-2014-3574, CVE-2014-3529)
Summary Multiple vulnerabilities have been identified in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details...
Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar
Summary Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar. Hence poi-ooxml-3.9.jar upgraded to poi-ooxml-4.0.jar to fix vulnerabilities. Vulnerability Details CVEID:CVE-2017-5644 DESCRIPTION: Apache POI is vulnerable to a denial of service, cause by an XML External...
Ubuntu: Security Advisory (USN-5644-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-5644-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5644-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...
Mitsubishi (CVE-2020-5644) (deprecated)
Plugin deprecated because GOT HMIs are not supported This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable, Inc. @DEPRECATED@ Disabled on 2023/06/29 as we don't support GOT HMIs...
RHEL 8 : thunderbird (RHSA-2020:5644)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5644 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.6.0. Security Fixes:...
CVE-2020-5644
creationtimestamp| type| source ---|---|--- 2020-11-06 07:50:17+00:00| seen| https://t.me/cibsecurity/15956...
CVE-2020-5644
Summary: CVE-2020-5644 refers to a buffer overflow in the TCP/IP function of the GT14 GOT1000 Series CoreOS (models GT1455-QTBDE, GT1450-QMBDE, GT1450-QLBDE, GT1455HS-QTBDE, GT1450HS-QMBDE) with CoreOS version 05.65.00.BD and earlier. What is affected: affected firmware versions and the particula...
EulerOS 2.0 SP2 : libuser (EulerOS-SA-2020-1628)
According to the versions of the libuser packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libuser 0.56 and 0.57 has a TOCTOU time-of-check time-of-use race condition when copying and removing directory trees.CVE-2012-5630 - libuser h...
Security Bulletin: A security vulnerability has been identified in the Apache POI, which is vulnerable to Denial of Service. (CVE-2017-12626, CVE-2017-5644)
Summary The Apache POI has security vulnerability to exploit the application through denial of service. Respective security vulnerabilities are discussed in detail in the subsequent sections. Vulnerability Details IBM Rational Asset Manager bundles Apache POI, which is used to set custom attribut...
Huawei EulerOS: Security Advisory for libuser (EulerOS-SA-2020-1406)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : libuser (EulerOS-SA-2020-1406)
According to the versions of the libuser packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libuser 0.56 and 0.57 has a TOCTOU time-of-check time-of-use race condition when copying and removing directory trees.CVE-2012-5630 - libuser h...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5644)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5644 advisory. - net: qlogic: Fix memory leak in qlalloclargebuffers Navid Emamdoost Orabug: 31055328 CVE-2019-18806 Tenable has extracted the preceding descripti...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
