104 matches found
KB4577053: Windows 7 and Windows Server 2008 R2 September 2020 Security Update
The remote Windows host is missing security update 4577053 or cumulative update 4577051. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
CentOS 7 : poppler and evince (RHSA-2020:1074)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1074 advisory. - Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. CVE-2018-21009 - An issue was discovered in Poppler 0.74.0. There i...
CVE-2019-1074
CVE-2019-1074 is a Windows elevation-of-privilege vulnerability involving symbolic link handling in folders with local service privileges. The available description states that exploitation could grant access to unauthorized information, and that the fix is to prevent symbolic links in these scen...
Microsoft Windows CVE-2019-1074 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on the system or gain unauthorized access. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft...
CVE-2018-1074
CVE-2018-1074 affects ovirt-engine API and administration web portal before versions 4.2.2.5 and 4.1.11.2, exposing Power Management credentials (cleartext passwords) to Host Administrators who control the hosts. This could allow escalation to power-management systems. Connected sources confirm t...
CVE-2013-1074
CVE-2013-1074 is rejected/not used per description.
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
gluegrant1.stanford.edu XSS vulnerability
Vulnerable URL: http://gluegrant1.stanford.edu/DIC/tissuecomparison/probesetsearchresult.php?qtype=s=Blood=%22%27/%3E;%3C/style%3E%3Cscript%3Ea=eval;b=alert;a%28b%28/%20XSSPOSED/.source%29%29;%3C/script%3E%27%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.20...
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2016-1063
Technical details for CVE-2016-1063 are not publicly provided in the connected documents. The supplied sources do not specify affected products, versions, root cause, or remediation beyond the general description. Monitor for updates.
CVE-2016-1074
Technical details about CVE-2016-1074 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.
Safari < 6.2.4 / 7.1.4 / 8.0.4 Multiple Vulnerabilities
Binary data 8695.prm...
CVE-2015-1074
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...
CVE-2015-1074
CVE-2015-1074 affects WebKit as used by Apple Safari prior to 6.2.4, 7.x prior to 7.1.4, and 8.x prior to 8.0.4. The vulnerability arises from memory corruption in WebKit that can be exploited by visiting a crafted site to allow remote code execution or cause a denial of service. Connected source...
CVE-2012-1074
CVE-2012-1074 affects TYPO3’s White Papers (mm_whtppr) extension 0.0.4 and earlier. The vulnerability is an SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Documented impact includes potential data exposure or modification and partial confiden...
CVE-2011-1074
CVE-2011-1074 concerns crontab in FreeBSD. A local user can determine the existence of arbitrary directories by supplying a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname. The vulnerability is a local information-disclosure/vector involving...
CVE-2011-1074
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname...