CVE-2020-0284

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253784...

CVE-2020-0284

CVE-2020-0284 affects Android 11 Telephony where a missing permission check enables a local permission bypass that can lead to information disclosure without extra execution privileges. Exploitation details are not provided in the supplied documents. The issue is listed across multiple feeds (e.g...

CVE-2020-0284

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253784...

CVE-2019-0284

CVE-2019-0284 relates to SAP HANA: the SLD Registration (SLDREG) component accepts XML from untrusted sources and does not adequately validate it, enabling an XML External Entity (XXE) reference. An attacker can invoke SLDREG with an XML file containing an XXE payload, potentially causing looping...

CVE-2018-0284

creationtimestamp| type| source ---|---|--- 2018-11-08 18:26:29+00:00| seen| https://t.me/cibsecurity/1119...

CVE-2018-0284

CVE-2018-0284 affects Cisco Meraki MR/ MS/ MX/ Z1/ Z3 devices. Local Status Page handling flaw allows an authenticated, remote attacker to modify device configuration files and establish an interactive session with elevated privileges, enabling further compromise or data exposure. Impact: privile...

Fedora 25 : dnsmasq (2017-515264ae24)

CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2017-0284

creationtimestamp| type| source ---|---|--- 2017-06-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42235...

CVE-2017-0284

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka "Window...

Information disclosure

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka "Window...

CVE-2017-0284

CVE-2017-0284 is an information-disclosure vulnerability in Windows Uniscribe that can disclose memory contents. It affects Windows and Office components (notably Uniscribe) across multiple OS releases (Windows 7/8.1/10, Windows Server variants, Office 2007/2010). The root cause is improper discl...

CVE-2017-0284

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka "Window...

Microsoft Windows Multiple Vulnerabilities (KB4022727)

This host is missing a critical security update according to Microsoft KB4022727 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4022722)

This host is missing a critical security update according to Microsoft KB4022722 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA11049 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. An improper validating of input before loading...

Microsoft Windows Uniscribe CVE-2017-0284 Information Disclosure Vulnerability

Description Microsoft Windows Uniscribe is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service Pack 2...

Windows 8.1 and Windows Server 2012 R2 June 2017 Security Updates

The remote Windows host is missing security update 4022717 or cumulative update 4022726. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Hyper-V instruction emulation due to a failure to properly enforce privilege levels. An...

CVE-2016-0284

The CVE-2016-0284 entry relates to an XML External Entity (XXE) vulnerability in the XML parser used by IBM Jazz-based CLM products. Affected products include Rational Collaborative Lifecycle Management (across 3.0.1.6 up to 6.0.2), Rational Quality Manager, Rational Team Concert, Rational DOORS ...

CVE-2016-0284

The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Ration...

CVE-2015-0284

CVE-2015-0284 describes a cross-site scripting (XSS) vulnerability in spacewalk-java used by Spacewalk and Red Hat Satellite 5.7. The issue allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details, and is noted as a co...