Privilege escalation

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070...

CVE-2020-1070

Technical details for CVE-2020-1070 are not provided in the supplied documents; only a high-level description is available. Monitor for updates.

KB4556852: Windows Server 2012 May 2020 Security Update

The remote Windows host is missing security update 4556852 or cumulative update 4556840. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited thi...

Microsoft SharePoint Server Cross Site Scripting (CVE-2019-1070)

A cross-site scripting vulnerability exists in Microsoft SharePoint Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

RHEL 7 : kernel-rt (RHSA-2020:1070)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1070 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

CVE-2011-1070

v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences...

CVE-2011-1070

CVE-2011-1070 involves v86d (before 0.1.10) failing to verify that netlink messages originate from the kernel. This can allow a local, unprivileged attacker to manipulate the video mode and potentially other consequences. Remediation per connected entries is to upgrade to v86d 0.1.10 or newer (pa...

CVE-2019-1070

CVE-2019-1070 is an XSS vulnerability affecting Microsoft SharePoint Server. The issue arises because SharePoint Server does not properly sanitize specially crafted web requests, enabling an attacker to execute scripts in the context of the current user after authentication. The published details...

Important: Red Hat Security Advisory: OpenShift Container Platform 3.9 security, bug fix, and enhancement update

Red Hat OpenShift Container Platform release 3.9.31 is now available with updates to packages and images that address security issues, fix several bugs, and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

CVE-2018-1070

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard...

CVE-2018-1070

OpenShift OpenShift Routing before v3.10 is vulnerable to improper input validation of Routing configurations, enabling DoS that can take down an entire router shard. Affected: OpenShift Container Platform routing component (pre-3.10). Root cause: input validation flaw in Routing configuration. I...

CVE-2018-1070

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard...

CVE-2016-1075

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-1065

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-1070

Technical details for CVE-2016-1070 are not publicly provided in the Connected documents. The initial description lists affected products and versions but no concrete root cause, impact, or remediation in the supplied materials. Monitor for updates.

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Safari < 6.2.4 / 7.1.4 / 8.0.4 Multiple Vulnerabilities

Binary data 8695.prm...

CVE-2015-1070

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1070

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1070

CVE-2015-1070 refers to a WebKit vulnerability in Apple Safari prior to 6.2.4, 7.x prior to 7.1.4, and 8.x prior to 8.0.4, where a crafted web site could cause memory corruption leading to remote arbitrary code execution or a crash/DoS. The vulnerability is rooted in the WebKit component used by ...