CVE-2023-0957

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This...

CVE-2023-0957

CVE-2023-0957 describes a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in Gitpod versions prior to release-2022.11.2.16. The issue arises because the Origin header is not restricted, allowing an attacker to initiate WebSocket connections to the Gitpod JSONRPC server using a victim’s crede...

CVE-2023-0957

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This...

RHEL 9 : lua (RHSA-2023:0957)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0957 advisory. The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also...

AlmaLinux 9 : lua (ALSA-2023:0957)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0957 advisory. - Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

Ubuntu: Security Advisory (USN-109-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-0957

CVE-2021-0957 affects Android 10–12, with the vulnerability located in the NotificationStackScrollLayout.java code path. It enables a local elevation of privilege by bypassing Factory Reset Protection, requiring no user interaction to exploit (local attack surface). Public details in connected so...

CVE-2022-0957

creationtimestamp| type| source ---|---|--- 2022-03-15 15:19:15+00:00| seen| https://t.me/cibsecurity/38916...

CVE-2022-0957

Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0957

ShowDoc (GitHub: star7th/showdoc) before 2.10.4 is affected by a Stored XSS via file upload. The root cause cited across sources is insufficient validation/detection of certain file extensions (notably .m3u8a) in the file upload feature, enabling attackers to upload malicious content that can exe...

SUSE: Security Advisory (SUSE-SU-2020:0957-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:0259-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:0957-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0957

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956, CVE-2020-0958...

Privilege escalation

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0957, CVE-2020-0958...

CVE-2020-0957

CVE-2020-0957 is a Windows Win32k elevation-of-privilege vulnerability in which the Windows kernel-mode driver fails to properly handle objects in memory, enabling local privilege escalation. Affected component: Win32k within the Windows kernel. Underlying cause: memory object handling issue in k...

Microsoft Win32k Elevation of Privilege (CVE-2020-0957)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2019-0957

creationtimestamp| type| source ---|---|--- 2019-05-16 19:50:40+00:00| seen| https://t.me/cvemitreorg/9...

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957...

CVE-2019-0957

CVE-2019-0957 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. The issue allows network-remote attack with low complexity to gain high-privilege access; CVSS v3 base score 8.8 (C:H/I:H/A:H) per NVD data. T...