Microsoft Win32k Elevation of Privilege (CVE-2020-1143)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1143, CVE-2019-1158...

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1143, CVE-2019-1154...

CVE-2019-1143 Windows Graphics Component Information Disclosure Vulnerability

...

CVE-2019-1143 Windows Graphics Component Information Disclosure Vulnerability

...

CVE-2019-1143

CVE-2019-1143 is a Windows GDI information-disclosure vulnerability. The issue arises when the GDI component improperly discloses memory contents, potentially allowing an attacker to obtain sensitive information to further compromise a system. Affected software is Windows with the Graphics Device...

Amazon Linux 2 : ruby (ALAS-2019-1143)

An issue was discovered in the OpenSSL library in Ruby. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is on...

CVE-2018-1143

The connected CNVD entry confirms a vulnerability in Belkin N750 routers (firmware 1.10.22) that allows an unauthenticated remote attacker to execute arbitrary commands with root privileges by sending a crafted HTTP request to twonky_command.cgi. Impact is elevated: full root command execution, e...

CVE-2017-1143

IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IB...

CVE-2017-1143

CVE-2017-1143 affects IBM Kenexa LCMS Premier on Cloud 9.1–10.3. Root cause: failure to properly enable HTTP Strict Transport Security, enabling a remote attacker to obtain sensitive information via MITM. Impact: information disclosure (CVSS v3 base 5.3, MEDIUM). Exploitation details are not prov...

CVE-2016-1143

Cross-site scripting XSS vulnerability in main.rb in Vine MV before 2015-11-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1143

Vine MV is affected by a Cross-Site Scripting (XSS) vulnerability in the file main.rb present in versions prior to 2015-11-08. The issue allows a remote attacker to inject arbitrary web script or HTML via unspecified vectors. Root cause is an XSS in Vine MV’s main.rb logic, with affected versions...

Oracle: Security Advisory (ELSA-2012-0467)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-0509)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2014-1143-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1143

LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, related to a "type confusion" issue...

CVE-2015-1143

CVE-2015-1143 involves LaunchServices on Apple OS X pre-10.10.3 . The vulnerability is described as a type confusion that allows a local user to gain privileges via a crafted localized string. Affected product/version is OS X versions earlier than 10.10.3; the impact is privilege escalation, with...

CentOS Update for kernel CESA-2014:1143 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : kernel (ELSA-2014-1143)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1143 advisory. - audit auditsc: auditkrule mask accesses need bounds checking Denys Vlasenko 1102702 1102703 CVE-2014-3917 Tenable has extracted the preceding description bloc...

openSUSE Security Update : freetype2 (openSUSE-SU-2012:0489-1)

Specially crafted font files could cause buffer overflows in freetype %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-220. The text description of this plugin is C SUSE LLC...