CVE-2019-1117

creationtimestamp| type| source ---|---|--- 2019-07-09 20:26:31+00:00| seen| https://t.me/N0iSeBit/299 2019-07-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47086...

Microsoft Windows 'DirectWrite' API CVE-2019-1117 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsof...

CVE-2018-1117

CVE-2018-1117 affects ovirt-ansible-roles prior to 1.0.6. The issue comes from a missing no_log directive, causing admin passwords to be disclosed in the provisioning log when adding an oVirt provider to ManageIQ/CloudForms. Impact is information disclosure with potential privilege escalation in ...

RHEL 7 : Virtualization (RHSA-2018:1452)

An update for ovirt-ansible-roles is now available for Red Hat Virtualization Engine 4.1. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Low: Red Hat Security Advisory: ovirt-ansible-roles security update

An update for ovirt-ansible-roles is now available for Red Hat Virtualization Engine 4.1. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Debian DLA-1117-1 : opencv security update

OpenCV through version 3.3 has out-of-bounds read/write errors, buffer overflows and double free issues in different functions. For Debian 7 'Wheezy', these problems have been fixed in version 2.3.1-11+deb7u2. We recommend that you upgrade your opencv packages. NOTE: Tenable Network Security has...

Code injection

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerabili...

CVE-2016-1117

CVE-2016-1117 affects Adobe Reader and Acrobat versions prior to 11.0.16, and DC Classic/Continuous lines prior to 15.006.30172 or 15.016.20039 on Windows and macOS. The issue enables bypassing JavaScript API execution restrictions via unspecified vectors, a distinct issue from CVE-2016-1038/1039...

CVE-2015-1117

CVE-2015-1117 affects Apple platforms: iOS before 8.3, OS X before 10.10.3, and Apple TV before 7.2. The kernel setreuid/setregid system-call implementations fail to drop privileges, enabling code execution with unintended user/group privileges via a crafted app. Remediation is to upgrade to the ...

CVE-2013-1117

CVE-2013-1117 refers to a buffer overflow in the exception handler of Cisco WebEx Recording Format (WRF) and ARF players. The vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service through a crafted WRF/ARF file, as described in Cisco’s advisory (Bug ID ...

CVE-2012-1117

Cross-site scripting XSS vulnerability in Joomla! 2.5.0 and 2.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1117

CVE-2012-1117 is described as a cross-site scripting (XSS) vulnerability in Joomla! versions 2.5.0 and 2.5.1, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected records confirm the affected product versions and the attack class, but do not spec...

Ubuntu 9.10 / 10.04 LTS / 10.10 : policykit-1 vulnerability (USN-1117-1)

Neel Mehta discovered that PolicyKit did not correctly verify the user making authorization requests. A local attacker could exploit this to trick pkexec into running applications with root privileges. Note that Tenable Network Security has extracted the preceding description block directly from...

CVE-2011-1117

Technical details for CVE-2011-1117 are not publicly provided in the connected documents. Monitor for updates.

Motorola Timbuktu Pro - Directory Traversal / Arbitrary File Upload (Metasploit)

$Id: timbuktufileupload.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-1117

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

CVE-2010-1117

CVE-2010-1117 is a heap-based buffer overflow in Internet Explorer 8 on Windows 7 that enables remote attackers to discover the base address of a Windows DLL, via unknown vectors, demonstrated during Pwn2Own at CanSecWest 2010. The description notes potential additional impact but does not provid...

CVE-2010-1117

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

Timbuktu Pro Directory Traversal/File Upload

This module exploits a directory traversal vulnerability in Motorola's Timbuktu Pro for Windows 8.6.5. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Timbuktu Pro Directory Traversal/File...

Gentoo Security Advisory GLSA 200411-26 (GIMPS,SETI@home,ChessBrain)

The remote host is missing updates announced in advisory GLSA 200411-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...