CVE-2023-1107

creationtimestamp| type| source ---|---|--- 2023-03-02 07:33:59+00:00| seen| https://t.me/cibsecurity/59303 2025-03-07 22:36:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6909...

CVE-2023-1107

CVE-2023-1107 is a stored Cross-site Scripting (XSS) vulnerability affecting FlatPress before version 1.3, documented as occurring in stored user input in flatpressblog/flatpress. Multiple sources (NVD/Red Hat/CNNVD/OSV) consistently describe a stored XSS issue in FlatPress prior to 1.3. Some con...

CVE-2023-1107 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1107 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-1107

The CVE-2022-1107 entry concerns Lenovo ThinkPad BIOS vulnerability where the use of Boot Services in the SmmOEMInt15 SMI handler can allow a local attacker with elevated privileges to execute arbitrary code. Affected component: BIOS boot services logic within SMM handling. Root cause: privilege ...

ThinkPad BIOS Vulnerabilities - Lenovo Support US

No description provided...

RHEL 7 : kernel (RHSA-2022:1107)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1107 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Use After Free in unixgc which...

@hola.org/har-validator (=2.0.6-hola.1), @hola.org/request (>=2.67.0-hola.5 <=2.67.0-hola.6) +46 more potentially affected by CVE-2018-1107 via is-my-json-valid (>=2.10.1 <=2.17.1)

is-my-json-valid NPM version =2.10.1, =2.67.0-hola.5, =2.67.0-lum.3, =1.0.1, =1.2.0, =1.0.0, =0.4.0, =1.0.0, =0.4.1, =0.0.1, =0.0.10 - fsa-creator =0.1.1 - geojsonvalidator =0.0.1 and more Source cves: CVE-2018-1107 Source advisory: OSV:GHSA-4HPF-3WQ7-5RPR...

SUSE: Security Advisory (SUSE-SU-2014:1107-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : fwupd (SUSE-SU-2021:1107-1)

This update for fwupd fixes the following issues : Update to version 1.2.14: bsc1182057 Add SBAT section to EFI images bsc1182057 CVE-2020-10759: Validate that gpgmeopverifyresult returned at least one signature bsc1172643 Note that Tenable Network Security has extracted the preceding description...

CVE-2018-1107

It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated...

CVE-2018-1107

CVE-2018-1107 describes a Denial of Service in the is-my-json-valid JavaScript library due to an inefficient regular expression used to validate emails. A crafted JSON file can cause high CPU consumption when validated, leading to potential service degradation or outage. The vulnerability is tied...

GHSA-MG98-X2CM-4CPF Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1107...

CVE-2020-1107

Technical details about CVE-2020-1107 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources for affected products, impact, and fixes.

EulerOS 2.0 SP5 : ipa (EulerOS-SA-2020-1107)

According to the version of the ipa packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal...

Huawei EulerOS: Security Advisory for ipa (EulerOS-SA-2020-1107)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-1107

CVE-2019-1107 concerns a remote code execution in Microsoft Edge via the Chakra scripting engine’s in-memory handling. The connected docs (GitHub advisories GHSA entries) reference an Out-of-bounds write/memory corruption in Chakra as the underlying issue and identify Edge/chakra as affected, ali...

CVE-2017-1107

creationtimestamp| type| source ---|---|--- 2019-06-19 18:32:15+00:00| seen| https://t.me/cibsecurity/5024...

CVE-2017-1107

IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system. IBM X-Force ID: 120906...

CVE-2017-1107

CVE-2017-1107 affects IBM Marketing Platform versions 9.1.0, 9.1.2, 10.0, and 10.1. The issue is an information disclosure where sensitive data is exposed in HTTP headers, potentially enabling an authenticated attacker to leverage it for subsequent attacks. The root cause is headers leaking sensi...