56 matches found
Ubuntu 22.04 LTS : Linux kernel (HWE) vulnerabilities (USN-5979-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5979-1 advisory. It was discovered that the KVM VMX implementation in the Linux kernel did not properly handle indirect branch prediction isolation between L1 and L2 VMs...
Mageia: Security Advisory (MGASA-2017-0163)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for zziplib (EulerOS-SA-2021-1240)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NVIDIA GPU Display Driver - September 2020 Security Bulletin - Lenovo Support US
No description provided...
CVE-2020-5979
creationtimestamp| type| source ---|---|--- 2020-10-02 22:54:21+00:00| seen| https://t.me/cibsecurity/15031...
CVE-2020-5979
CVE-2020-5979 affects the NVIDIA GPU Display Driver (Windows) in the Control Panel component. The vulnerability allows a high-privilege process to present a dialog box for user input, potentially enabling privilege escalation. NVIDIA’s security bulletin (Sept 2020) lists this CVE with a base scor...
Huawei EulerOS: Security Advisory for zziplib (EulerOS-SA-2019-2478)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-5979
Cross-site request forgery CSRF vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2018-5979
SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...
CVE-2018-5979
SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...
CVE-2018-5979
SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...
CVE-2018-5979
CVE-2018-5979 affects the Wchat Fully Responsive PHP AJAX Chat Script version 1.5. The vulnerability is an SQL Injection exploitable via the login.php User field, as documented in multiple sources. Public PoCs/exploits (e.g., Exploit-DB entry 43864 and related listings) demonstrate injection tech...
Wchat 1.5 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319 Version:...
Wchat 1.5 SQL Injection
Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319 Version: 1.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...
Wchat 1.5 - SQL Injection
Wchat 1.5 - SQL Injection Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319 Version: 1.5 Category: Webapps Tested...
Wchat 1.5 - SQL Injection
Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319 Version: 1.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...
[SECURITY] [DLA 994-1] zziplib security update
Package : zziplib Version : 0.13.56-1.1+deb7u1 CVE ID : CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981 CVE-2017-5974 Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib allows remote attackers to cause a denial of service...
Debian DSA-3878-1 : zziplib - security update
Agostino Sarubbo discovered multiple vulnerabilities in zziplib, a library to access Zip archives, which could result in denial of service and potentially the execution of arbitrary code if a malformed archive is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
CVE-2016-5979
IBM Distributed Marketing 8.6, 9.0, and 10.0 contain an input-validation vulnerability that lets a privileged authenticated user create an instance with an invalid security profile, resulting in the new instance being inaccessible to the intended user. Root cause: improper input validation during...