85 matches found
CVE-2022-0671
creationtimestamp| type| source ---|---|--- 2022-02-18 20:40:19+00:00| seen| https://t.me/cibsecurity/37718...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
The connected sources confirm a vulnerability in vscode-xml prior to version 0.19.0 where downloading a schema can trigger blind SSRF or DoS via a large file. Affected component is the vscode-xml schema download/processing path; root cause is improper handling of externally downloaded schema data...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2021-0671
creationtimestamp| type| source ---|---|--- 2021-11-18 18:15:46+00:00| seen| https://t.me/cibsecurity/32613...
CVE-2021-0671
CVE-2021-0671 affects the apusys component, where a missing bounds check can cause memory corruption leading to local escalation of privilege with System execution privileges. Exploitation details are not provided in the documents; user interaction is not required. A patch is identified as ALPS05...
Scientific Linux Security Update : bind on SL7.x i686/x86_64 (2021:0671)
The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0671-1 advisory. - bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation CVE-2020-8625 Note that Nessus has not tested for this...
Oracle Linux 7 : bind (ELSA-2021-0671)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0671 advisory. - Fix off-by-one bug in ISC SPNEGO implementation CVE-2020-8625 - Fix tsig-request verify CVE-2020-8622 - Prevent PKCS11 daemon crash on crafted packet...
Microsoft Windows Multiple Vulnerabilities (KB4537789)
This host is missing a critical security update according to Microsoft KB4537789 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4532693)
This host is missing a critical security update according to Microsoft KB4532693 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Privilege escalation
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672...
CVE-2020-0671
Technical details for CVE-2020-0671 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.
CVE-2019-0671
CVE-2019-0671 affects the Microsoft Office Access Connectivity Engine. The vulnerability is a memory handling flaw that could allow remote code execution when a user opens a specially crafted file. The issue is addressed by Office security updates released in February 2019 for Office C2R; monitor...
CVE-2019-0671
creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...
Description of the security update for Office 2013: February 12, 2019
Description of the security update for Office 2013: February 12, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following:...
CVE-2018-0671
CVE-2018-0671 affects INplc-RT 3.08 and earlier. The vulnerability is a privilege-escalation flaw where an attacker with administrator rights can execute arbitrary code on Windows via unspecified vectors. The INplc-RT product is impacted (and versions up to 3.08 and earlier for the installer and ...
JVN#59624986: Multiple vulnerabilities in INplc
INplc provided by MICRONET CORPORATION contains multiple vulnerabilities listed below. DLL preloading vulnerability CWE-427 - CVE-CVE-2018-0667 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H| Base Score: 7.8 CVSS v2| AV:N/AC:M/AU:N/C:P/I:P/A:P| Base Score...
CVE-2017-0671
CVE-2017-0671: A remote code execution vulnerability in the Android libraries affecting Android 4.4.4 (Library component). The available documents confirm RCE in the Libraries area of Android 4.4.4, but do not provide the exact root cause details, affected subcomponents, or concrete exploit vecto...
CVE-2016-0671
CVE-2016-0671 affects Oracle Fusion Middleware 12.1.2.0, specifically the Oracle HTTP Server component and its OSSL Module subcomponent. The connected CNVD entry describes a data‑read vulnerability in the OSSL Module of Oracle HTTP Server, enabling remote attackers to compromise data confidential...
