KLA11772 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in .NET Framework can be...

CVE-2019-1171 SymCrypt Information Disclosure Vulnerability

...

CVE-2019-1171

CVE-2019-1171 is an information-disclosure vulnerability in SymCrypt during OAEP decryption. The underlying issue is in OAEP decoding operations, allowing an attacker who can log on to an affected system to obtain information that could aid further compromise. The CVE does not enable code executi...

CVE-2019-1171 SymCrypt Information Disclosure Vulnerability

...

Microsoft Windows SymCrypt CVE-2019-1171 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1709 for ARM64-based Systems Microsoft Windows 10 Versi...

Amazon Linux 2 : polkit (ALAS-2019-1171)

A vulnerability was found in polkit. When authentication is performed by a non-root user to perform an administrative task, the authentication is temporarily cached in such a way that a local attacker could impersonate the authorized process, thus gaining access to elevated privileges.CVE-2019-61...

Oracle Solaris Critical Patch Update : jul2018_SRU11_3_34_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows low privilege...

CVE-2015-1171

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/gsmsim.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:36+00:00| seen|...

CVE-2018-1171

The CVE-2018-1171 entry concerns Joyent SmartOS release-20170803. An attacker who can run low-privileged code on the target can exploit a flaw in the DTrace DOF handling to write past the end of an allocated object, enabling local privilege escalation and code execution under the host OS. Root ca...

CVE-2006-1171

...

CVE-2006-1171

CVE-2006-1171 entry is rejected and not used as stated in the Initial Description.

CVE-2017-1171

The IBM TRIRIGA Application Platform vulnerability CVE-2017-1171 allows an authenticated user to execute Application actions they do not have access to. Affected versions are 3.3.0–3.3.2.5, 3.4.0–3.4.2.5, and 3.5.0–3.5.2.0. Remediation: apply fixes in IBM TRIRIGA Platform 3.3.2.6, 3.4.2.6, or 3.5...

CVE-2016-1171

Cross-site scripting XSS vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1171

The CVE-2016-1171 issue affects the baserCMS Recruit plugin, specifically versions prior to 0.9.3. A cross-site scripting (XSS) vulnerability exists that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. "Recruit" is described as a job-listing plugin for base...

CVE-2016-1171

Cross-site scripting XSS vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Oracle: Security Advisory (ELSA-2011-0542)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-2016)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1171

Stack-based buffer overflow in GSM SIM Utility aka SIM Card Editor 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file...

CVE-2015-1171

CVE-2015-1171 affects GSM SIM Utility (aka SIM Card Editor) 6.6. The flaw is a stack-based buffer overflow triggered by a long entry in a .sms file, enabling remote code execution. Public materials in the Connected documents include an in-depth exploit description and sample exploit code (e.g., E...

Sim Editor 6.6 - Local Stack Buffer Overflow

include include include define SIZE 65536 / Title: Sim Editor v6.6 Stack Based Buffer Overflow Version: 6.6 Tested on: Windows XP sp2 en, Windows 8 64-bit Date: 16-01-2015 Author: Osanda Malith Jayathissa E-Mail: osandacatunseen.is Website: OsandaMalith.wordpress.com CVE: CVE-2015-1171 / const ch...