CVE-2023-0951

CVE-2023-0951 affects Devolutions Server 2022.3.12 and earlier, due to improper access controls on certain API endpoints. A standard privileged user could perform privileged actions, with impact described as high for confidentiality, integrity, and availability. The provided documents identify th...

CVE-2021-0951

CVE-2021-0951 concerns an integer overflow in the DevmemIntHeapAcquire function (Android-related). The vulnerability could enable arbitrary code execution and local privilege escalation without extra privileges or user interaction. Public details in the provided documents identify the affected st...

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945,...

GHSA-WJMF-6X7G-XQ67 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945,...

RHEL 8 : expat (RHSA-2022:0951)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0951 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code...

Oracle Linux 8 : expat (ELSA-2022-0951)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0951 advisory. - Improve fix for CVE-2022-25236 - Related: CVE-2022-25236 - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 -...

CVE-2022-0951 File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc

File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0951

CVE-2022-0951 affects ShowDoc (GitHub: star7th/showdoc) prior to version 2.10.4. The vulnerability is a file upload restriction bypass that enables stored XSS via uploaded content. Evidence across multiple sources confirms the same issue and demonstrates a bypass technique (e.g., uploading files ...

CVE-2020-0951

The CVE-2020-0951 issue is a security feature bypass in Windows Defender Application Control (WDAC). The vulnerability could allow an attacker with local admin access to bypass WDAC enforcement and execute PowerShell commands that WDAC would normally block. Exploitation requires an administrator ...

CVE-2020-0951 Windows Defender Application Control Security Feature Bypass Vulnerability

...

CVE-2012-0951

creationtimestamp| type| source ---|---|--- 2020-02-12 20:37:23+00:00| seen| https://t.me/cibsecurity/9794...

CVE-2012-0951

A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry...

CVE-2012-0951

A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry...

CVE-2012-0951

CVE-2012-0951 affects NVIDIA Graphics Drivers 29549, with a memory corruption vulnerability caused by an unknown function in proc/driver/nvidia/registry. CVSSv3.1: LOCAL, LOW privileges, NONE user interaction, with HIGH confidentiality, integrity, and availability impact. Exploitation status not ...

CVE-2019-0951

creationtimestamp| type| source ---|---|--- 2019-05-16 19:50:33+00:00| seen| https://t.me/cvemitreorg/5...

CVE-2019-0951

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0950...

CVE-2019-0951

CVE-2019-0951 is a spoofing vulnerability in Microsoft SharePoint Server where a specially crafted web request is not properly sanitized. It is distinct from CVE-2019-0949/0950. The CVSS v3 base score is 5.4 (Medium); attack vector NETWORK and user interaction is required. Connected sources do no...

KLA11484 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...