98 matches found
Minecraft Servers Under Attack: Microsoft Warns About Cross-Platform DDoS Botnet
Microsoft on Thursday flagged a cross-platform botnet that's primarily designed to launch distributed denial-of-service DDoS attacks against private Minecraft servers. Called MCCrash, the botnet is characterized by a unique spreading mechanism that allows it to propagate to Linux-based devices...
CVE-2022-1028
The CVE-2022-1028 entry concerns the WordPress Security Firewall, Malware Scanner, Secure Login and Backup plugin prior to 4.2.1, which does not sanitize/escape certain settings. This allows malicious users with administrator privileges to store JavaScript, leading to stored Cross-Site Scripting ...
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2022-1028)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1028
In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2021-1028
CVE-2021-1028 : In Android 12, the vulnerability is in SurfaceFlinger.cpp within setClientStateLocked, where a use-after-free can trigger an out-of-bounds write. This leads to local privilege escalation with no extra execution privileges required and no user interaction. Public documents consiste...
SUSE: Security Advisory (SUSE-SU-2014:1028-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2021:1028-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Fujitsu Eternus Storage DX200 S4 Broken Authentication
Title: Fujitsu Eternus Storage DX200 S4 Broken Authentication Author: Seccops https://seccops.com Vendor Homepage: https://www.fujitsu.com/global/products/computing/storage/disk/eternus-dx/ Version: Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25 Classifications: OWASP: A2:2017-Broken...
CVE-2020-1028
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...
Memory corruption
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1126, CVE-2020-1150...
Memory corruption
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1126, CVE-2020-1136...
CVE-2020-1028
CVE-2020-1028 describes a memory corruption vulnerability in Windows Media Foundation due to improper handling of objects in memory. The issue is identified across multiple CVE entries (1028, 1126, 1136, 1150) as “Media Foundation Memory Corruption Vulnerability” and is consistent in wording acro...
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
CVE-2011-1028
The documents collectively describe a vulnerability in Smarty3 involving the $smarty.template variable, which can allow attackers to potentially execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file. Core details across sources confirm this is a P...
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
Privilege escalation
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1007, CVE-2019-1022, CVE-2019-1026, CVE-2019-1027, CVE-2019-1028...
CVE-2019-1028
Technical details (affected products, versions, root cause, exploit vectors, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.