72 matches found
CVE-2023-0944
Bhima version 1.27.0 allows an authenticated attacker with regular user permissions to update arbitrary user session data such as username, email and password. This is possible because the application is vulnerable to IDOR, it does not correctly validate user permissions with respect to certain...
CVE-2023-0944
Bhima version 1.27.0 allows an authenticated attacker with regular user permissions to update arbitrary user session data such as username, email and password. This is possible because the application is vulnerable to IDOR, it does not correctly validate user permissions with respect to certain...
RHEL 7 : kernel (RHSA-2023:0944)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0944 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: stack overflow in doprocdointvec and...
CVE-2022-0944
creationtimestamp| type| source ---|---|--- 2022-03-15 06:18:45+00:00| seen| https://t.me/cibsecurity/38910 2024-09-08 23:40:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8485 2024-09-10 14:24:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8504 2024-09-10...
CVE-2022-0944
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1...
CVE-2022-0944 Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1...
CVE-2022-0944
CVE-2022-0944 affects the SQLPad project (SQLPad, prior to 6.10.1). The vulnerability arises from template injection in the connection test endpoint, enabling remote code execution (RCE) with the privileges of the SQLPad process. Affected versions are SQLPad ≤ 6.10.0. Several public exploit PoCs ...
SUSE: Security Advisory (SUSE-SU-2021:0944-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Privilege escalation
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-0944...
CVE-2020-0944
CVE-2020-0944 is an Elevation of Privilege vulnerability in the Connected User Experiences and Telemetry Service, caused by improper file-handling. The issue enables local attackers with low privileges to escalate, with high impact to confidentiality, integrity, and availability (per CVSS 3.1 met...
CVE-2020-0944
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-1029...
CVE-2019-0944
...
CVE-2019-0944
CVE-2019-0944 is rejected and does not represent an active vulnerability entry.
Security Bulletin: IBM Operational Decision Manager : CVE-2014-0944, CVE-2014-0945, CVE-2014-0946
Summary This Security Bulletin addresses 3 security vulnerabilities CVE-2014-0944, CVE-2014-0945 and CVE-2014-0946 in IBM Operational Decision Manager. All issue are related to the RES Console provided in Rule Execution Server. Vulnerability Details CVE ID: CVE-2014-0944 DESCRIPTION: IBM...
Privilege escalation
Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...
CVE-2018-0944
Technical details for CVE-2018-0944 are not publicly available in the provided connected documents. Monitor for updates; based on current inputs, no concrete affected products, versions, exploit info, or remediation are disclosed here.
Microsoft SharePoint Server CVE-2018-0944 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Security Updates for Microsoft SharePoint Server and Microsoft Project Server (March 2018)
The Microsoft SharePoint Server or Microsoft Project Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an...
Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X
Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...
CVE-2016-0944
Technical details for CVE-2016-0944 are not provided in the connected documents. The initial entry mentions affected Adobe products and memory corruption/remote code risk but lacks root cause, affected versions, or available fixes. Monitor for updates.