CVE-2019-1178 Windows Elevation of Privilege Vulnerability

...

CVE-2019-1178

CVE-2019-1178 is an elevation-of-privilege vulnerability in the memory handling of ssdpsrv.dll. The NVD entry states that a locally authenticated attacker could execute code with elevated permissions by running a crafted application, and that a security update fixes the issue by ensuring ssdpsrv....

CentOS Update for qemu-img CESA-2019:1178 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1178

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-1178

The CVE-2018-1178 entry relates to Foxit Reader 9.0.0.29935, where the vulnerability resides in the addField handling and results from not validating the existence of an object before performing operations. This is a remote code execution vulnerability that an attacker can exploit after convincin...

CVE-2016-1178

The CVE-2016-1178 issue affects appleple a-blog cms up to version 2.6.0.1, where a flaw in the session management of the comment feature allows remote attackers to obtain or modify sensitive data. Related sources describe concrete impacts: an unauthenticated attacker could delete arbitrary commen...

CVE-2015-1178

CVE-2015-1178 affects X-Cart 5.1.8 and earlier. The vulnerability is a cross-site scripting (XSS) in cart.php, exploitable via the product_id and category_id parameters, allowing an attacker to inject arbitrary script into a user’s browser. Multiple connected sources corroborate a reflected XSS i...

CVE-2015-1178

Multiple cross-site scripting XSS vulnerabilities in cart.php in X-Cart 5.1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 productid or 2 categoryid parameter...

X-CART e-Commerce 5.1.8 Cross Site Scripting

CVE-2015-1178-xss-x-cart-ecommerce Information ---------------- Advisory by Octogence. Name: Reflected XSS Vulnerability in X-CART e-Commerce software Affected Software : X-Cart Affected Versions: 5.1.8 and possibly below Vendor Homepage : https://www.x-cart.com Vulnerability Type : Cross-site...

openSUSE Security Update : gimp (openSUSE-SU-2011:0586-1)

This update fixes various overflows : + CVE-2011-1178: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P + CVE-2011-1782: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : pidgin (openSUSE-SU-2012:0905-1)

Changes in pidgin : - Fixing bnc752275, CVE-2012-1178: Pidgin fails to verify the text's utf-8 encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-432. The text description ...

openSUSE Security Update : gimp (openSUSE-SU-2011:0586-1)

This update fixes various overflows : + CVE-2011-1178: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P + CVE-2011-1782: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Oracle Linux 6 : pidgin (ELSA-2012-1102)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1102 advisory. - Add patch for CVE-2011-2485 RH bug 837561. - Add patch for CVE-2012-1178 RH bug 837560. - Add patch for CVE-2012-2318 RH bug 837560. - Add patch for...

GLSA-201209-23 : GIMP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201209-23 GIMP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GIMP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

Scientific Linux Security Update : gimp on SL5.x i386/x86_64

The GIMP GNU Image Manipulation Program is an image composition and editing program. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially...

CentOS Update for finch CESA-2012:1102 centos5

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2012:1102 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for gimp CESA-2011:0837 centos4 x86_64

Check for the Version of gimp OpenVAS Vulnerability Test CentOS Update for gimp CESA-2011:0837 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for finch CESA-2012:1102 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for finch CESA-2012:1102 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for gimp CESA-2011:0838 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...