120 matches found
MiracleLinux 4 : rh-postgresql96-postgresql-9.6.10-1.AXS4 (AXSA:2018-3314:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3314:01 advisory. postgresql: Certain host connection parameters defeat client-side security defenses CVE-2018-10915 postgresql: Missing authorization and memory...
MiracleLinux 7 : rh-postgresql10-postgresql-10.5-1.el7 (AXSA:2018-3312:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3312:01 advisory. postgresql: Certain host connection parameters defeat client-side security defenses CVE-2018-10915 postgresql: Missing authorization and memory...
Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2025-1115)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1115 advisory. Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is...
CVE-2013-1115
Buffer overflow in Cisco WebEx Advanced Recording Format ARF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ARF file, aka Bug IDs CSCue74118,...
CVE-2025-1115
creationtimestamp| type| source ---|---|--- 2025-02-08 10:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhnv2rhrd327 2025-02-08 12:04:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3871 2025-02-08 13:03:30+00:00|...
CVE-2025-1115
A vulnerability classified as problematic was found in RT-Thread up to 5.1.0. Affected by this vulnerability is the function...
CVE-2025-1115
A vulnerability classified as problematic was found in RT-Thread up to 5.1.0. Affected by this vulnerability is the function...
CVE-2025-1115
RT-Thread up to 5.1.0 is affected by a local-information-disclosure vulnerability in the lwp_syscall.c path (sys_device_close/sys_device_control/etc.). The issue stems from improper handling/manipulation of the argument arg[0], enabling information disclosure via local access. Exploit details are...
CVE-2025-1115 RT-Thread lwp_syscall.c sys_timer_settime information disclosure
A vulnerability classified as problematic was found in RT-Thread up to 5.1.0. Affected by this vulnerability is the function...
RHEL 7 : rh-postgresql10-postgresql (RHSA-2018:2565)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2565 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...
CVE-2024-1115
creationtimestamp| type| source ---|---|--- 2024-01-31 21:22:09+00:00| seen| https://t.me/ctinow/177110 2024-02-22 15:12:32+00:00| seen| https://t.me/ctinow/190782...
CVE-2024-1115 openBI Setting.php dlfile os command injection
A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may be initiated remotely. The exploit h...
BELL-CVE-2018-1115 CVE-2018-1115 does not affect BellSoft software
Bulletin has no description...
Debian: Security Advisory (DSA-2189-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-1115
creationtimestamp| type| source ---|---|--- 2023-03-01 16:33:23+00:00| seen| https://t.me/cibsecurity/59221 2025-03-11 14:39:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7153...
CVE-2023-1115
CVE-2023-1115 describes a stored XSS in pimcore/pimcore before version 10.5.18. The issue arises because input in the Link.php attributes of the Document Page Link Editable is not adequately sanitized/escaped, allowing an attacker to inject JavaScript that executes in a user’s browser when the pa...
CVE-2023-1115 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...
CVE-2022-1115
A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service...
CVE-2022-1115
A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service...
CVE-2022-1115
CVE-2022-1115 is a heap-buffer-overflow in ImageMagick’s PushShortPixel() in quantum-private.h triggered by specially crafted TIFF images, potentially causing a denial of service. The vulnerability is documented across multiple sources (NVD entry and Debian/Gentoo advisories) and is part of a set...