CVE-2019-1177

CVE-2019-1177 is a Windows elevation-of-privilege vulnerability in how rpcss.dll handles objects in memory. A locally authenticated attacker could run a specially crafted application to execute code with elevated permissions. The issue stems from memory object handling within rpcss.dll, with miti...

CVE-2019-1177 Windows Elevation of Privilege Vulnerability

...

Microsoft Windows CVE-2019-1177 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on the system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems...

Oracle Linux 7 : libvirt (ELSA-2019-1177)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1177 advisory. - qemu: Don't cache microcode version CVE-2018-12127, CVE-2018-12126, CVE-2018-12130 - cpux86: Do not cache microcode version CVE-2018-12126,...

CentOS Update for libvirt CESA-2019:1177 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : libvirt (CESA-2019:1177) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2017-1177

creationtimestamp| type| source ---|---|--- 2019-02-05 20:22:28+00:00| seen| https://t.me/cibsecurity/2400...

CVE-2017-1177

IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429...

CVE-2018-1177

Foxit Reader 9.0.0.29935 is affected by CVE-2018-1177. The flaw lies in the handling of addAnnot, where the code fails to validate the existence of an object before performing operations, enabling remote code execution under the current process context. User interaction is required to trigger the...

Webmin < 1.200 Unauthorized Configuration File Access

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.200. It is, therefore, affected by an issue which may allow a remote attacker to access and alter certain configuration files, which could lead to privilege escalation or other attacks. C Tenable...

CVE-2015-1177

Exponent CMS 2.3.2 is affected by a reflected cross-site scripting (XSS) vulnerability in index.php, exploitable via the src parameter in the search functionality. Technical details across sources show that an attacker can craft a URL containing malicious JavaScript (e.g., payloads like or onerr...

CVE-2015-1177

Cross-site scripting XSS vulnerability in Exponent CMS 2.3.2...

CVE-2016-1177

The CVE-2016-1177 entry concerns Falcon WisePoint and WisePoint Authenticator, where the management screen is vulnerable to clickjacking. Concrete details from connected sources show that WisePoint 4.3.1 and earlier, and WisePoint Authenticator 4.1.19.22 and earlier are affected. The root cause i...

CVE-2015-1177-xss-exponent

CVE-2015-1177-xss-exponent Information ---------------- Advisory by Octogence. Name: Reflected XSS Vulnerability in Exponent CMS Affected Software : Exponent Affected Versions: 2.3.2 and possibly below Vendor Homepage : http://www.exponentcms.org/ Vulnerability Type : Cross-site Scripting Severit...

Exponent CMS 2.3.2 Cross Site Scripting

CVE-2015-1177-xss-exponent Information ---------------- Advisory by Octogence. Name: Reflected XSS Vulnerability in Exponent CMS Affected Software : Exponent Affected Versions: 2.3.2 and possibly below Vendor Homepage : http://www.exponentcms.org/ Vulnerability Type : Cross-site Scripting Severit...

CVE-2013-1177

CVE-2013-1177 affects Cisco Network Admission Control (NAC) Manager. The vulnerability is a SQL injection in NAC Manager that, per sources, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected versions are NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2. T...

Gentoo Security Advisory GLSA 201208-06 (libgdata)

The remote host is missing updates announced in advisory GLSA 201208-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2012-1177

CVE-2012-1177 affects libgdata before 0.10.2 and 0.11.x before 0.11.1. The issue is that libgdata did not validate SSL certificates, enabling MITM attackers to obtain user names and passwords via spoofed certificates. Public advisories and patch notes indicate vulnerable builds include libgdata l...

Mandriva Update for libgdata MDVSA-2012:111 (libgdata)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2482-1 : libgdata - insufficient certificate validation

Vreixo Formoso discovered that libgdata, a library used to access various Google services, wasn't validating certificates against trusted system root CAs when using an HTTPS connection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...