98 matches found
CVE-2021-0935
The CVE-2021-0935 entry concerns the Linux kernel IPv6 path: in ip6_xmit() within ip6_output.c, an out-of-bounds write can occur due to a use-after-free, enabling locally escalated privileges with SYSTEM/root rights. Exploitation details are not provided in the supplied documents. Some connected ...
SUSE: Security Advisory (SUSE-SU-2021:0935-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-0935
CVE-2020-0935 (OneDrive for Windows Elevation of Privilege) is a local elevation-of-privilege flaw in the OneDrive for Windows Desktop application caused by improper handling of symbolic links. An authenticated, local attacker could run a specially crafted program to overwrite a target file, gain...
CVE-2019-0935
CVE-2019-0935 is rejected/not used according to the Initial Description.
Important: Red Hat Security Advisory: openstack-neutron security and bug fix update
An update for openstack-neutron is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Microsoft Windows jscript Use-After-Free
Windows: multiple use-after-free issues in jscript Array methods CVE-2018-0935 There are multiple use-after-free issues in Array methods in jscript. When jscript executes an Array method such as Array.join, it first retrieves the length of an array. If the input is not an array but an object, the...
CVE-2018-0935
creationtimestamp| type| source ---|---|--- 2018-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44404 2025-08-31 03:01:10+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
CVE-2017-0935
EdgeOS (Ubiquiti EdgeRouter) versions 1.9.1.1 and earlier are affected by an Improper Privilege Management flaw caused by inadequate file-system protections, enabling an operator (read-only) account to escalate to admin/root. The CVSS metrics indicate high impact with attacker being network-origi...
Memory corruption
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0893, CVE-2018-092...
Memory corruption
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-092...
CVE-2018-0935
Technical details about CVE-2018-0935 are not provided in the supplied documents; no affected product/version or remediation is specified here. Monitor for updates in connected sources.
Microsoft Internet Explorer Memory Corruption And Information Disclosure Vulnerabilities (KB4089187)
This host is missing an important security update according to Microsoft security updates KB4089187. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2018-0935)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
KB4088879: Windows 8.1 and Windows Server 2012 R2 March 2018 Security Update (Meltdown)(Spectre)
The remote Windows host is missing security update 4088879 or cumulative update 4088876. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local...
KB4088878: Windows 7 and Windows Server 2008 R2 March 2018 Security Update (Meltdown)(Spectre)
The remote Windows host is missing security update 4088878 or cumulative update 4088875. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local...
Oracle Linux 7 : tomcat (ELSA-2017-0935)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0935 advisory. - Resolves: rhbz1413591 CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing Tenable has extracted the preceding description...
Virtuozzo Linux Errata and Security Advisory 2017:0935 Moderate
Upstream security update. Follow RHSA-2017-0935 for details...
Bomgar Remote Support - Unauthenticated Code Execution (Metasploit)
Exploit for linux platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Bomgar Remote Support Unauthenticated Code Execution', 'Description' = %q Thi...