CVE-2008-1099

macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages...

CVE-2019-1099

Technical details about CVE-2019-1099 are not publicly available in the provided documents. The connected items discuss related CVEs and advisories but do not specify affected products/versions/root cause/impact for this CVE. Monitor for updates.

CVE-2019-1099

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1100, CVE-2019-1101, CVE-2019-111...

CVE-2019-1099

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1100, CVE-2019-1101, CVE-2019-111...

Microsoft Windows GDI Component CVE-2019-1099 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...

KLA11819 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

Amazon Linux AMI : tomcat7 (ALAS-2018-1099)

When the default servlet in Apache Tomcat versions 7.0.23 to 7.0.90 returned a redirect to a directory e.g. redirecting to '/foo/' when the user requested '/foo' a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.CVE-2018-11784 C Tenable...

RHEL 7 : firefox (RHSA-2018:1099)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1099 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to versi...

CVE-2018-1099 vulnerabilities

Vulnerabilities for packages: etcd, dgraph, etcd-fips...

CVE-2018-1099

DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost or any other address...

CVE-2018-1099

CVE-2018-1099 is a DNS rebinding vulnerability in etcd (versions up to 3.3.1). The issue allows an attacker to manipulate DNS records to rebind DNS entries, enabling unintended access to DNS records. Connected documents corroborate the same CVE with details and reference IBM/astral bulletin cover...

Solaris 10 (x86) : 118669-61

JavaSE 5.0x86: update 61 patch equivalent to JDK 5.0u61, 64bit. Date this patch was last updated by Sun : Jan/14/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Money Laundering Via Author Impersonation on Amazon?

Patrick Reames had no idea why Amazon.com sent him a 1099 form saying he'd made almost $24,000 selling books via Createspace, the company's on-demand publishing arm. That is, until he searched the site for his name and discovered someone has been using it to peddle a $555 book that's full of...

Debian: Security Advisory (DLA-1099-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Registered at SSA.GOV? Good for You, But Keep Your Guard Up

KrebsOnSecurity has long warned readers to plant your own flag at the my Social Security online portal of the U.S. Social Security Administration SSA -- even if you are not yet drawing benefits from the agency -- because identity thieves have been registering accounts in peoples' names and...

Debian DLA-1099-1 : linux security update (BlueBorne) (Stack Clash)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-7482 Shi Lei discovered that RxRPC Kerberos 5 ticket handling code does not properly verify metadata, leading to information disclosure, denia...

mysearch.com XSS vulnerability

Vulnerable URL: http://www.mysearch.com/pictures?q=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1099 VIP website status:| Yes...

CVE-2017-1099

CVE-2017-1099 – IBM Jazz Foundation information disclosure : Multiple sources describe an information-disclosure vulnerability in IBM Jazz Foundation components (part of IBM Rational CLM/RTC/RQM, etc.). The provided documents state that an authenticated user could potentially access sensitive inf...

CVE-2013-1099

CVE-2013-1099 entry is rejected and not used.

Microsoft IE And Microsoft Edge Flash Player Multiple Vulnerabilities (3157993)

This host is missing a critical security update according to Microsoft Bulletin MS16-064. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...