CVE-2022-1175

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes...

CVE-2022-1175

GitLab CE/EE is affected by CVE-2022-1175 due to improper neutralization of user input in notes, enabling Stored XSS. Affected ranges are GitLab CE/EE versions: 14.4 up to before 14.7.7, 14.8 up to before 14.8.5, and 14.9 up to before 14.9.2. Connected documents indicate fixes exist in later rele...

CVE-2022-1175

Removed by vendor...

SUSE: Security Advisory (SUSE-SU-2021:1175-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : virt:rhel (CESA-2019:1175)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1175 advisory. - hardware: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12126 - hardware: Micro-architectural Load Port Data Sampling - Information Le...

CVE-2021-1175

Cisco Small Business RV110W/RV130/RV130W/RV215W routers are affected by CVE-2021-1175 due to improper validation of user-supplied input in the web-based management interface. An authenticated attacker with valid admin credentials could remotely execute arbitrary code as root or cause a device rel...

CVE-2020-1175

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1175, CVE-2020-1176...

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1174, CVE-2020-1175...

CVE-2020-1175

CVE-2020-1175 is a remote code execution vulnerability in the Windows Jet Database Engine related to improper handling of objects in memory. The connected KB document (KB4556799) references a May 12, 2020 security update for Windows 10 builds 18362.836 and 18363.836 that includes security fixes a...

KB4556852: Windows Server 2012 May 2020 Security Update

The remote Windows host is missing security update 4556852 or cumulative update 4556840. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited thi...

taglib security update

CentOS Errata and Security Advisory CESA-2020:1175 An update for taglib is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

CVE-2019-1175 Windows Elevation of Privilege Vulnerability

...

CVE-2019-1175

CVE-2019-1175 is a Windows elevation-of-privilege vulnerability linked to psmsrv.dll handling of in-memory objects. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. Microsoft security guidance notes the fix involves ensuring psmsrv.dll pr...

Microsoft Windows CVE-2019-1175 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain the elevated privileges on the system. Technologies Affected Microsoft Windows 10 Version 1709 for ARM64-based Systems Microsoft Windows 10 Version 1803 for 32-bit...

Microsoft Windows Elevation of Privilege (CVE-2019-1175)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Amazon Linux 2 : filesystem (ALAS-2019-1175)

Images built for the Amazon Linux 2.0.20190218 release included system files with incorrect permissions applied. Incorrect permissions were applied to files including : /etc/fstab /etc/localtime /etc/image-id /etc/sysconfig/i18n /etc/sysconfig/clock /etc/sysconfig/keyboard...

Security Bulletin: IBM Maximo Asset Management is vulnerable to SQL injection(CVE-2017-1175)

Summary IBM Maximo Asset Management is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Vulnerability Details CVEID: CVE-2017-1175 DESCRIPTION: IBM Maximo...

CVE-2018-1175

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-1175

CVE-2018-1175 affects Foxit Reader 9.0.0.29935. The flaw is in the handling of the interactive attribute of PrintParams objects, arising from lack of proper memory initialization. This leads to information disclosure, with remote attackers able to access sensitive data; exploitation requires user...