114 matches found
CVE-2023-0945
SourceCodester Best POS Management System 1.0 contains an XSS vulnerability in the endpoint index.php?page=add-category. The Name parameter can be manipulated with a payload like > to trigger cross-site scripting. The issue affects the specific function handling the add-category page and can b...
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945,...
GHSA-WJMF-6X7G-XQ67 ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945,...
SUSE: Security Advisory (SUSE-SU-2022:0945-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-0945
creationtimestamp| type| source ---|---|--- 2022-03-15 06:18:44+00:00| seen| Telegram/dKS0KvyonD98G1kYbhzG8B4dROZKr8B2OBjeVkrAnyZIy0...
CVE-2022-0945 Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc
Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4...
CVE-2022-0945
CVE-2022-0945 refers to a stored XSS vulnerability in ShowDoc (star7th/showdoc) prior to v2.10.4. The root cause is inadequate validation in the file upload functionality, failing to reject .cshtml and .axd extensions, enabling an attacker to upload malicious scripts that can execute in a user’s ...
CVE-2022-0945 Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc
Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4...
SUSE: Security Advisory (SUSE-SU-2021:0945-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-0945
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0946, CVE-2020-0947...
Information disclosure
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0939, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947...
Information disclosure
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947...
CVE-2020-0945
CVE-2020-0945 is a Media Foundation information-disclosure vulnerability in Microsoft Windows media handling where memory objects are not properly managed, potentially exposing partial confidentiality. The entry provides a CVSS score (4.3/5.0 base, MEDIUM) and vectors for both CVSS v2 and v3, but...
KB4550930: Windows 10 April 2020 Security Update
The remote Windows host is missing security update 4550930. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...
CVE-2012-0945
creationtimestamp| type| source ---|---|--- 2020-01-15 16:39:21+00:00| seen| https://t.me/cibsecurity/9203...
CVE-2012-0945
whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...
CVE-2012-0945
CVE-2012-0945 affects whoopsie-daisy prior to 0.1.26. The reported vulnerability allows the root user to remove arbitrary files, describing a root‑level impact due to the underlying cause in whoopsie-daisy. The entry is corroborated across multiple sources in this set (e.g., Red Hat/TLP and NVD r...
CVE-2019-0945
CVE-2019-0945 is a remote code execution vulnerability in the Microsoft Office Access Connectivity Engine, triggered by improper handling of objects in memory. The issue affects Microsoft Office products using the Office Connectivity Engine and can be exploited when a user opens a specially craft...
Microsoft Office 2016 Multiple Vulnerabilities (KB4464551)
This host is missing an important security update according to Microsoft KB4464551 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2013 Service Pack 1 Multiple Vulnerabilities (KB4464561)
This host is missing an important security update according to Microsoft KB4464561 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...