137 matches found
CVE-2020-0168
CVE-2020-0168 affects Android 10, with a vulnerability in the Media Framework where impeg2_fmt_conv_yuv420p_to_yuv420sp_uv in impeg2_format_conv.c can trigger an out-of-bounds write due to a missing bounds check. This can enable remote code execution; exploitation is described as requiring user i...
CVE-2019-0168
CVE-2019-0168 affects Intel CSME and TXE subsystems (also involving AMT/SPS/DAL) due to insufficient input validation in the subsystem. The issue potentially allows a privileged user to escalate privileges or disclose information via local access. Fixes exist: Intel/partners list updated firmware...
Solaris 10 (x86) : 139391-01
SunOS 5.10x86: lpadmin and ppdmgr patch. Date this patch was last updated by Sun : Dec/12/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
CVE-2017-0168
CVE-2017-0168 is a vulnerability in the Windows Hyper-V Network Switch where input from a guest OS is not properly validated on hosts running Windows 8.1, Windows Server 2008/2008 R2/2012/2012 R2. The underlying issue is improper input validation in the Hyper-V Network Switch, leading to informat...
Microsoft Windows Monthly Rollup (KB4015550)
This host is missing a monthly rollup according to Microsoft KB4015550. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Monthly Rollup (KB4015549)
This host is missing a monthly rollup according to Microsoft security update KB4015549. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Security update for the Hyper-V vulnerability in Windows Server 2008: April 11, 2017
Security update for the Hyper-V vulnerability in Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, see the following Common Vulnerabilities and Exposures CVE. CVE-2017-0163 CVE-2017-0168 CVE-2017-0180 More Information Important If you install a language pack after...
Microsoft Windows Hyper-V CVE-2017-0168 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 8.1 for x64-based Systems Microsoft Windows Server 2008 R2 for...
CVE-2016-0168
creationtimestamp| type| source ---|---|--- 2016-05-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39832 2025-08-31 03:01:28+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
Information disclosure
GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to obtain sensitive information via a crafted document, aka "Windows Graphics Component...
CVE-2016-0168
CVE-2016-0168 is a Windows GDI information-disclosure vulnerability affecting multiple Windows versions. Connected data confirms exploitation activity (Exploits listed on Exploit-DB and sightings in CIRCL) but provides no vendor-specific patch or remediation details in the supplied documents. No ...
KLA11914 Multiple vulnerability in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...
Microsoft Windows Graphics Component Information Disclosure (MS16-055: CVE-2016-0168)
A Vulnerability was discovered within Internet explorer when handling a spcially crafted EMF file allowing an information disclosure about the user filesystem. The root cause of the vulnerability is related to the CreateColorSpaceW function that tries to build a file path checking of its existanc...
MS16-055: Security Update for Microsoft Graphics Component (3156754)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple information disclosure vulnerabilities exist in the Windows Graphics component. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user to...
Oracle: Security Advisory (ELSA-2013-0168-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-0168)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-0168
IBM Security SiteProtector System is affected by CVE-2015-0168 (XSS) affecting versions 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2. The vulnerability arises from improper validation that could allow remote authenticated users to inject scripts, potentially stealing cookies b...
RHEL 6 : rhevm 3.1.2 (RHSA-2013:0211)
Updated rhevm packages that fix two security issues and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...
CVE-2014-0168
CVE-2014-0168 corresponds to a CSRF vulnerability in Jolokia prior to 1.2.1. The issue allows remote attackers to hijack user authentication and cause execution of MBeans methods via a crafted web page. Affected product: Jolokia (before 1.2.1). Root cause: Cross-site request forgery in the Joloki...