SUSE CVE-2016-0969

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial o...

Slackware: Security Advisory (SSA:2005-251-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-0969

creationtimestamp| type| source ---|---|--- 2022-04-11 18:16:17+00:00| seen| https://t.me/cibsecurity/40476...

CVE-2022-0969

The Image optimization & Lazy Load by Optimole WordPress plugin before 3.3.2 does not sanitise and escape its "Lazyload background images for selectors" settings, which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfilteredhtml capability i...

CVE-2022-0969

CVE-2022-0969 affects the WordPress Optimole plugin prior to 3.3.2. The issue is that the settings for “Lazyload background images for selectors” are not properly sanitised/escaped, which could allow high-privilege users (e.g., admins) to perform Cross-Site Scripting even when unfiltered_html is ...

CVE-2022-0969 Image optimization & Lazy Load < 3.3.2 - Admin+ Stored Cross-Site Scripting

The Image optimization & Lazy Load by Optimole WordPress plugin before 3.3.2 does not sanitise and escape its "Lazyload background images for selectors" settings, which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfilteredhtml capability i...

CVE-2021-0969

The CVE-2021-0969 entry relates to a missing null check in AccessPoint.java:getTitle, causing a possible unhandled exception and remote DoS if a nearby Wi‑Fi AP provides invalid information. Affected product: Android (Android-10 and Android-11). Exploitation requires user interaction per the desc...

CVE-2020-0969

CVE-2020-0969 is described in the connected documents as a remote code execution vulnerability in the Chakra Scripting Engine used by Microsoft Edge (HTML-based) / ChakraCore. The advisory notes memory corruption when handling in‑memory objects, i.e., a Chakra Scripting Engine Memory Corruption v...

KLA11749 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to...

SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:0969-1)

This update for permissions fixes the following issues : Fixed spelling of icinga group bsc1168364 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

CVE-2019-0969

CVE-2019-0969 is rejected/not used and does not represent an active vulnerability entry.

CVE-2019-0969

...

Security Bulletin: Cross-Site Request Forgery vulnerability in GDS component of IBM InfoSphere Master Data Management - Collaborative Edition (CVE-2014-0969)

Summary IBM InfoSphere Master Data Management - Collaborative Edition is vulnerable to Cross-Site Request Forgery attacks. Vulnerability Details Description: Due to insufficient safeguards against cross-site request forgery in IBM InfoSphere Master Data Management - Collaborative Edition an...

CVE-2018-0969

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44459...

Information disclosure

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization ASLR bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012 R2,...

CVE-2018-0969

The CVE-2018-0969 entry describes an information-disclosure vulnerability in the Windows kernel that could enable retrieval of information to bypass Kernel ASLR. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 and various Windows Server ed...

Microsoft Windows Kernel CVE-2018-0969 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

KLA11221 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows . Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service and possibly to bypass security restrictions. Below is a complete list of...

Security Updates for Windows Server 2008 (April 2018)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who successfully...

Unbound < 1.4.3 'sock_list' Structure Allocation Remote Denial Of Service Vulnerability (CVE-2010-0969)

According to its self-reported version number, the remote Unbound DNS resolver is affected by a remote denial of service vulnerability when allocating 'socklist' structures. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106380; scriptversion"1.4"; scriptcvsdate"Date...