CVE-2016-11086

The CVE-2016-11086 entry concerns the oauth-ruby gem (lib/oauth/consumer.rb) up to version 0.5.4 for Ruby, where server X.509 certificate verification is skipped if a certificate bundle cannot be found. This allows man-in-the-middle attackers to spoof the server and obtain sensitive information. ...

CVE-2020-11086

creationtimestamp| type| source ---|---|--- 2020-05-30 00:55:28+00:00| seen| https://t.me/cibsecurity/12422...

CVE-2020-11086

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadntlmv2clientchallenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0...

CVE-2020-11086 Out-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadntlmv2clientchallenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0...

CVE-2020-11086

CVE-2020-11086 affects FreeRDP before version 2.1.0, where ntlm_read_ntlm_v2_client_challenge can read beyond an internal structure (out-of-bounds read). The issue is fixed in FreeRDP 2.1.0 and later. Connected advisories (e.g., MiracleLinux/Miracle Linux AXSA entries, Debian/DLA updates, Rocky/R...

Intel Active Management Technology 12.0.x Multiple Vulnerabilities (INTEL-SA-00241)

Multiple vulnerabilities in Intel Active Management Technology AMT may allow escalation of privilege. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2019-11086

Insufficient input validation in subsystem for IntelR AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-11086

CVE-2019-11086 involves insufficient input validation in the Intel AMT subsystem prior to 12.0.45, potentially allowing an unauthenticated user with physical access to escalate privileges. Affected component: Intel AMT subsystem (Intel CSME/AMT stack). Root cause: input validation gap in the AMT ...

SUPEE-11086 - RCE, XSS, CSRF and other vulnerabilities

More info at https://magento.com/security/patches/supee-11086...

CVE-2018-11086

Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains the CF admin...

CVE-2018-11086

CVE-2018-11086 : A privilege-escalation vulnerability in the Pivotal Usage Service component of Pivotal Application Service affects versions 2.0 before 2.0.21, 2.1 before 2.1.13, and 2.2 before 2.2.5. The issue allows a space developer with access to the system org to access an artifact that cont...