98 matches found
CVE-2023-1075
A flaw was found in the Linux Kernel. The tlsistxready incorrectly checks for list emptiness, potentially accessing a type confused entry to the listhead, leaking the last byte of the confused field that overlaps with rec-txready...
SUSE CVE-2023-1075
A flaw was found in the Linux Kernel. The tlsistxready incorrectly checks for list emptiness, potentially accessing a type confused entry to the listhead, leaking the last byte of the confused field that overlaps with rec-txready...
CVE-2022-1075
CVE-2022-1075 affects College Website Management System 1.0. The vulnerable code path is /cwms/classes/Master.php?f=save_contact in the Contact Handler, where input manipulation can result in persistent cross-site scripting. The issue may be exploitable remotely and requires authentication. No re...
RHEL 7 : httpd24-httpd (RHSA-2022:1075)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1075 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Errors encountered during...
Backdoor.Win32.LanaFTP.k Heap Corruption
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e2660742a80433e027ee9bdedc40e190.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.LanaFTP.k Vulnerability: Heap Corruption Description: The malware listens on TCP port...
Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software
Nvidia has disclosed a group of security vulnerabilities in the Nvidia graphics processing unit GPU display driver, which could subject gamers and others to privilege-escalation attacks, arbitrary code execution, denial of service DoS and information disclosure. Meanwhile, the Nvidia virtual GPU...
SUSE: Security Advisory (SUSE-SU-2021:1075-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1075
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'...
CVE-2020-1075
CVE-2020-1075 is a Windows Subsystem for Linux information-disclosure vulnerability caused by improper handling of memory-resident objects. The vulnerability could allow an attacker with local access to obtain sensitive information from memory, with CVSSv3.1 indicating local access, low attack co...
Huawei EulerOS: Security Advisory for nss, nss-util (EulerOS-SA-2017-1075)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-1075
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'...
CVE-2019-1075
The CVE-2019-1075 entry documents a spoofing vulnerability in ASP.NET Core that can cause an open redirect . The connected data provides concrete remediation details: affected packages are Microsoft ASP.NET Core 2.1.x before 2.1.12 and 2.2.x before 2.2.6; upgrading to at least 2.1.12 or 2.2.6 mit...
Security Update for .NET Core SDK (July 2019)
The Microsoft .NET Core SDK installation on the remote host is version 2.1.x 2.1.508 or 2.1.605 or 2.1.701, 2.2.x 2.2.108 or 2.2.205 or 2.2.301. It is, therefore, affected by a spoofing vulnerability that could lead to an open redirect. An unauthenticated, remote attacker could exploit this issue...
Security Update for Microsoft ASP.NET Core (July 2019)
The Microsoft ASP.NET Core installation on the remote host is version 2.1.x 2.1.12, 2.2.x 2.2.6. It is, therefore, affected by a spoofing vulnerability that could lead to an open redirect. An unauthenticated, remote attacker could exploit this issue, via a link that has a specially crafted URL, a...
openSUSE: Security Advisory for libssh2_org (openSUSE-SU-2019:1075-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
RHEL 7 : Virtualization Manager (RHSA-2018:2071)
An update for org.ovirt.engine-root is now available for Red Hat Virtualization Manager 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2018-1075
ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When engine-setup was run and one chooses to provision the database manually or connect to a remote database, the password input was logged in cleartext during the verification step...
CVE-2018-1075
CVE-2018-1075 affects ovirt-engine up to version 4.2.3, where the password entered during manual/provisioning of the database is logged in cleartext during the verification step, potentially leaking the database password via provisioning logs. This is an information-disclosure vulnerability tied ...