CVE-2020-27250

SoftMaker Office PlanMaker 2021 (Revision 1014) contains a heap-based buffer overflow in the Office Art record parsing path. The vulnerability involves 0x00eb MsoDrawingGroup processing and a nested OfficeArtDggContainer (0xf000) containing a 0xf150 sub-record. Depending on Version/Instance (0x00...

CVE-2020-27248

CVE-2020-27248 affects SoftMaker Office PlanMaker 2021 (Revision 1014). The vulnerability arises in Office Art/Office drawing parsing: specifically MsoDrawingGroup with nested OfficeArt records and 0x00eb, 0xf000, and 0xf150 sub-records. Depending on Version/Instance (0x0003/0x0014, 0x0004/0x0015...

CVE-2020-27247

A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0002, an attacker can entice the...

CVE-2020-1014

CVE-2020-1014 is described in connected docs as an elevation of privilege in the Microsoft Windows Update Client caused by improper privilege handling. The CNVD entry attributes the flaw to the Windows Update Client, enabling privilege escalation, and the OpenVAS/MSKB references corroborate this ...

CVE-2019-1014

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

CVE-2019-1014

CVE-2019-1014 is a Windows Win32k elevation-of-privilege vulnerability. The issue arises when Win32k fails to properly handle memory objects, allowing a locally authenticated attacker to run arbitrary code in kernel mode, install programs, and gain full user rights. Exploitation requires logon an...

CVE-2019-1014 Win32k Elevation of Privilege Vulnerability

...

Microsoft Windows Multiple Vulnerabilities (KB4503291)

This host is missing a critical security update according to Microsoft KB4503291 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Win32k CVE-2019-1014 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

CVE-2015-1014

creationtimestamp| type| source ---|---|--- 2019-03-25 21:27:32+00:00| seen| https://t.me/cibsecurity/3334...

CVE-2015-1014

CVE-2015-1014 affects Schneider Electric OPC Factory Server (OFS) 3.5 when used with SCADA Expert Vijeo Citect/CitectSCADA versions 7.20, 7.30, or 7.40. The vulnerability arises from DLL hijacking: a local user must load a crafted DLL into the system directory, and if the application opens that D...

CVE-2015-1014

A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3....

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1014-1)

This update for the Linux Kernel 3.12.74-606460 fixes several issues. The following security issues were fixed : - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. bsc1085447. - CVE-2018-1068: A flaw was found in the Linux kernels implementation o...

CVE-2018-1014

CVE-2018-1014 affects Microsoft SharePoint Server. The vulnerability is an elevation of privilege caused by improper sanitization of specially crafted web requests to an affected SharePoint server. Affected component: Microsoft SharePoint Server; root cause: insufficient sanitization in handling ...

Debian: Security Advisory (DLA-1014-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1014

CVE-2011-1014 is a rejected/duplicate entry and does not represent an active vulnerability.

Debian DLA-1014-1 : libclamunrar security update

It was discovered that there was an arbitrary code execution vulnerability in libcamunrar, a library to add unrar support to the Clam anti-virus software. This was caused by an integer overflow resulting in a negative value of the DestPos variable, which allows the attacker to write out of bounds...

brazzers.com XSS vulnerability

Vulnerable URL: http://www.brazzers.com/categories/view/id/151/sex"/ Details: Description| Value ---|--- Patched:| Yes, at 23.05.2017 Latest check for patch:| 23.05.2017 11:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1014 VIP website status:| Yes Check...

mydala.com XSS vulnerability

Vulnerable URL: http://www.mydala.com/mumbai/search?q=activities hobbies" autofocus onfocus="window.onerror=alert;throw 'OPENBUGBOUNTY' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Adobe Flash Player DLL Hijacking

Hi @ll, the executable uninstallers for Flash Player before version 22.0.0.192 and 18.0.0.360 both released on 2016-06-15 are vulnerable to DLL hijacking: they load and execute multiple Windows system DLLs from their "application directory" instead of Windows' "system directory"...