SUSE: Security Advisory (SUSE-SU-2012:0773-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1148

creationtimestamp| type| source ---|---|--- 2021-01-14 00:48:51+00:00| seen| https://t.me/cibsecurity/22114...

CVE-2021-1148

The CVE-2021-1148 entry relates to multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The root cause is improper validation of user-supplied input in the web interface, enabling an authenticated attacker with valid adm...

CVE-2020-1148

Technical details for CVE-2020-1148 are not publicly available in the provided documents. Connected sources reference SharePoint spoofing vulnerabilities in general, but do not map concrete affected versions, root cause, or fixes. Monitor for updates.

Description of the security update for SharePoint Server 2010: June 9, 2020

Description of the security update for SharePoint Server 2010: June 9, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the followin...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2017-1148)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1148

Directory traversal vulnerability in bsdispasmimetype.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to read arbitrary files via directory traversal sequences in the filepath parameter $filename variable...

CVE-2019-1148

creationtimestamp| type| source ---|---|--- 2019-08-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47262...

Information disclosure

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1078, CVE-2019-1148...

CVE-2019-1148 Microsoft Graphics Component Information Disclosure Vulnerability

...

CVE-2019-1148

CVE-2019-1148 affects the Microsoft Windows Graphics Component, where memory handling flaws can disclose information. The vulnerability requires the attacker to log on and run a crafted application, with potential information disclosure as the impact. Microsoft addresses it via a patch that fixes...

Security Update for Microsoft Office (August 2019) (macOS)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in Microsoft Word due to improper handling of objects in memory. An unauthenticated,...

Amazon Linux AMI : curl (ALAS-2019-1148)

A heap use-after-free flaw was found in curl related to closing an easy handle. When closing and cleaning up an 'easy' handle in the Curlclose function, the library code first frees a struct without nulling the pointer and might then subsequently erroneously write to a struct field within that...

Security Bulletin: Multiple denial of service vulnerabilities with Expat may affect IBM HTTP Server shipped with IBM Service Delivery Manager (CVE-2012-0876, CVE-2012-1148, CVE-2016-4472 and CVE-2016-0718)

Summary IBM HTTP Server is shipped as components of IBM Service Delivery Manager. Information about a security vulnerability affecting IBM HTTP Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2012-0876 DESCRIPTION: Expat is vulnerable to a denial of service,...

Tenable Nessus < 7.1.0 Multiple Vulnerabilities (TNS-2018-05)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 7.1.0. It is, therefore, affected by multiple vulnerabilities: - Tenable Nessus contains a flaw that allows a stored cross-site scripting XSS attack. This flaw exists because the program...

CVE-2018-1148

Nessus before 7.1.0 is vulnerable to a session fixation flaw caused by insufficient session management. An authenticated attacker could hijack a user session after a password change by leveraging an existing session ID. The connected sources confirm the affected product (Tenable Nessus), the vuln...

CVE-2017-1148

The CVE-2017-1148 entry applies to IBM OpenPages GRC Platform versions 7.2–7.3 with the OpenPages Loss Event Entry (LEE) application. The root cause is described as insecure object reference leading to information disclosure of sensitive data, including private APIs, which could be leveraged for ...

SUSE SLES12 Security Update : xen (SUSE-SU-2017:1148-1)

This update for xen fixes several issues. These security issues were fixed : - CVE-2017-7980: An out-of-bounds r/w access issues in the Cirrus CLGD 54xx VGA Emulator support allowed privileged user inside guest to use this flaw to crash the Qemu process resulting in DoS or potentially execute...

CVE-2016-1148

CVE-2016-1148 affects Akerun – Smart Lock Robot App for iOS prior to v1.2.4, where the iOS app fails to verify SSL server certificates. This undermines TLS trust and can enable a man-in-the-middle attack to eavesdrop on encrypted traffic. The issue is documented in multiple sources (including JVN...

Oracle: Security Advisory (ELSA-2014-1148)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...