CVE-2020-1145

creationtimestamp| type| source ---|---|--- 2020-05-22 02:46:12+00:00| seen| https://t.me/VulnerabilityNews/14733 2020-05-22 02:55:24+00:00| seen| https://t.me/cibsecurity/12235...

CVE-2020-1145

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could...

Information disclosure

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0963...

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1141, CVE-2020-1145, CVE-2020-1179...

CVE-2020-1145

Technical details for CVE-2020-1145 (affected product/version, root cause, exploit information) are not publicly provided in the supplied documents. Monitor for updates and new connected documents that reveal specifics.

CVE-2011-1145

creationtimestamp| type| source ---|---|--- 2019-11-20 00:26:16+00:00| seen| https://t.me/cibsecurity/8211 2024-02-14 09:26:46+00:00| seen| https://t.me/ctinow/184492...

CVE-2011-1145

The CVE-2011-1145 entry affects unixODBC: the SQLDriverConnect() function before version 2.2.14p2 may overflow a buffer when a large SAVEFILE value is used in the connection string. Multiple connected sources corroborate the same issue across OS vendors (Red Hat, SUSE, Debian, OSV listings). Publ...

CVE-2019-1145

creationtimestamp| type| source ---|---|--- 2019-08-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47261...

Remote code execution

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1145, CVE-2019-1149, CVE-2019-1150, CVE-2019-1151, CVE-2019-1152...

CVE-2019-1145 Microsoft Graphics Remote Code Execution Vulnerability

...

CVE-2019-1145

CVE-2019-1145 affects the Windows font library, where improper handling of specially crafted embedded fonts allows remote code execution. The vulnerability’s impact: attacker gains control of the affected system, potentially installing programs, and altering data or accounts; higher risk on syste...

Microsoft Windows Graphics Component CVE-2019-1145 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10...

Oracle Linux 8 : bind (ELSA-2019-1145)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1145 advisory. 32:9.11.4-17.P2 - Fix inefective limit of TCP clients CVE-2018-5743 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Amazon Linux 2 : kernel (ALAS-2019-1145)

The USB subsystem mishandles size checks during the reading of an extra descriptor, related to usbgetextradescriptor in drivers/usb/core/usb.c.CVE-2018-20169 A flaw was found where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition betwe...

CVE-2018-1145

Affected product: Belkin N750 router (firmware 1.10.22). Vulnerable component: proxy.cgi handling crafted HTTP requests. Root cause: stack buffer overflow triggered by unauthenticated remote input. Impact (as stated): remote unauthenticated user can overflow a stack buffer; exploitation details n...

Dasan Networks GPON ONT WiFi Router H64X Series Cross Site Request Forgery

Dasan Networks GPON ONT WiFi Router H64X Series Cross-Site Request Forgery Vendor: Dasan Networks Product web page: http://www.dasannetworks.com | http://www.dasannetworks.eu Affected version: Model: H640GR-02 H640GV-03 H640GW-02 H640RW-02 H645G Firmware: 3.03p1-1145 3.03-1144-01 3.02p2-1141...

CVE-2017-1145

IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference : 1999672...

CVE-2017-1145

The CVE-2017-1145 issue affects IBM WebSphere MQ 8.0.0.6 (and IBM MQ Appliance 8.0.0.6) where channel agents are not properly terminated when no longer needed, enabling a denial of service via resource exhaustion. Root cause: improper termination of channel agents (amqrmppa). Impact: potential Do...

CVE-2016-1145

Directory traversal vulnerability in WebManager in NEC EXPRESSCLUSTER X through 3.3 11.31 on Windows and through 3.3 3.3.1-1 on Linux and Solaris allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-1145

The CVE-2016-1145 entry describes a directory traversal flaw in NEC EXPRESSCLUSTER X WebManager. Affected: EXPRESSCLUSTER X 3.3 for Windows (build 11.31) and WebManager 3.3 3.3.1-1 for Linux/Solaris. Impact: remote attacker can read arbitrary server files via unspecified vectors. Root cause: dire...