104 matches found
CVE-2021-0879
CVE-2021-0879 involves the PVRSRVBridgeRGXTDMSubmitTransfer path of the PowerVR kernel driver. A missing size check enables a potential integer overflow, leading to out-of-bounds heap access. This could allow local escalation of privilege without additional execution privileges and without user i...
CVE-2023-0879 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12...
CVE-2023-0879
CVE-2023-0879 is a stored XSS in BTCPayServer prior to version 1.7.12. Multiple sources (NVD/NVD-derived entries, Red Hat, CNNVD, OSV, PRION, and huntr references) confirm the issue as Cross-site Scripting affecting btcpayserver/btcpayserver. The root cause is an XSS vulnerability in the stored d...
CVE-2022-0879
creationtimestamp| type| source ---|---|--- 2022-04-18 22:23:55+00:00| seen| https://t.me/cibsecurity/41066 2025-12-03 01:11:15+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-0879.yaml 2025-12-03 21:02:28+00:00| seen|...
CVE-2022-0879
The CVE-2022-0879 entry concerns the Caldera Forms WordPress plugin prior to version 1.9.7. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by the plugin not validating and escaping the cf-api parameter before echoing it in responses. Affected component: cf-api handling in Cald...
SUSE: Security Advisory (SUSE-SU-2014:0879-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Information disclosure
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0879, CVE-2020-0880...
Information disclosure
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0879, CVE-2020-0882...
CVE-2020-0879
CVE-2020-0879 is a Windows GDI information-disclosure vulnerability in which memory objects within the Graphics Device Interface can be leveraged to retrieve information from the target system. Public documentation describes it as an information-disclosure issue arising from how GDI handles memor...
CVE-2019-0879
Technical details about CVE-2019-0879 are not publicly provided in the supplied documents. The connected EUVD/CNVD entries reference the Jet Database Engine remote code execution but do not include affected versions, exploit info, or fixes. Monitor for updates.
KB4493441: Windows 10 Version 1709 and Windows Server Version 1709 April 2019 Security Update
The remote Windows host is missing security update 4493441. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver luafv.sys...
CVE-2018-0879
CVE-2018-0879 affects Microsoft Edge (EdgeHTML-based) on Windows 10 version 1709. The vulnerability arises from Edge’s handling of objects in memory, causing information disclosure. The CVE is described as an Edge Information Disclosure Vulnerability. Affected products include Microsoft Edge (Edg...
Microsoft Edge CVE-2018-0879 Information Disclosure Vulnerability
Description Microsoft Edge is prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Edge Recommendations Run all software as a nonprivileged user with minimal acce...
CVE-2017-0879
CVE-2017-0879 is an information disclosure vulnerability in the Android Media framework affecting Pixel/Nexus devices. The Android Bulletin (Dec 2017) places this issue under the Media framework with a Moderate severity and lists affected AOSP updates up to 8.0, specifically noting updated AOSP v...
CVE-2016-0879
Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL...
CVE-2016-0879
Affected device: Moxa Secure Router EDR-G903 (versions ≤3.4.11). Vulnerability: Unauthenticated access allows an attacker to download server-side configuration and log files by requesting specific URLs after performing the import function (CWE-284 / CVSSv3.1 base 7.5, remote, network). Impact: Di...
Oracle: Security Advisory (ELSA-2008-0879)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-0879
CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service application crash via a 1 CON, 2 AUX, or 3 NUL device name in the filename of an attachment...
CVE-2015-0879
AL-Mail32 (CREAR) vulnerability CVE-2015-0879 affects the Windows email client where a specially crafted attachment filename can trigger a DoS (application crash). Affected versions include 1.13c and earlier, with the root cause described as a flaw in processing attachment filenames. The in-scope...
RHEL 6 : rhev-hypervisor6 (RHSA-2012:0531)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0531 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization...