CVE-2022-1186

The WordPress plugin Be POPIA Compliant (vulnerable up to 1.1.5) exposes site visitors’ emails and usernames to unauthenticated users via an API route. Root cause cited in multiple sources is insufficient access controls on the API route (no restrictions on sensitive data exposure). No exploit de...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

SUSE: Security Advisory (SUSE-SU-2012:0763-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1186

Cisco CVE-2021-1186 affects the Cisco Small Business RV110W, RV130, RV130W, and RV215W routers via multiple vulnerabilities in the web-based management interface. The root cause is improper validation of user-supplied input in the web UI, exploitable by an authenticated attacker with valid admini...

WordPress NextGEN Gallery Plugin Cross-Site Scripting (CVE-2010-1186)

A script injection vulnerability exists in Alex rabe nextgen gallery 0.33. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVE-2020-1186

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1134, CVE-2020-1144,...

CVE-2020-1186

Public technical details about CVE-2020-1186 are not present in the provided documents. The connected EUVD entries mention malware named 'sbrugna' but do not describe affected products, vulnerable components, impact, or mitigations. Monitor for updates.

CVE-2019-1186

An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...

CVE-2019-1186

An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...

CVE-2019-1186 Windows Elevation of Privilege Vulnerability

...

CVE-2019-1186

CVE-2019-1186 affects Windows via wcmsvc.dll, where improper handling of memory objects enables local privilege escalation. A locally authenticated attacker can run a crafted application to execute code with elevated privileges. A security update patches wcmsvc.dll to correctly handle memory obje...

Amazon Linux AMI : file (ALAS-2019-1186)

dobidnote in readelf.c in libmagic.a has a stack-based buffer over-read, related to fileprintf and filevprintf. CVE-2019-8904 docorenote in readelf.c in libmagic.a has a stack-based buffer over-read, related to fileprintable, a different vulnerability than CVE-2018-10360 . CVE-2019-8905 docorenot...

Dell EMC Isilon OneFS - Multiple Vulnerabilities

Exploit for linux platform in category web applications Dell EMC Isilon OneFS Multiple Vulnerabilities 1. Advisory Information Title: Dell EMC Isilon OneFS Multiple Vulnerabilities Advisory ID: CORE-2017-0009 Advisory URL:...

Dell EMC Isilon OneFS XSS / Code Execution / CSRF

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Dell EMC Isilon OneFS Multiple Vulnerabilities 1. Advisory Information Title: Dell EMC Isilon OneFS Multiple Vulnerabilities Advisory ID: CORE-2017-0009 Advisory URL:...

CVE-2016-1186

Kintone mobile for Android (Cybozu) versions 1.0.0–1.0.5 fail to verify SSL server certificates, enabling potential man-in-the-middle eavesdropping on encrypted traffic. This is reported across multiple sources (NVD, JVN) with consistent impact. Affected component: kintone mobile for Android; roo...

teamviewer.com XSS vulnerability

Vulnerable URL: https://www.teamviewer.com/en/use-cases/?case=Four"%3e%3cscript%3ealert'OPENBUGBOUNTY'%3c%2fscript%3e1=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1186 VIP website status:| Yes Check...

Oracle: Security Advisory (ELSA-2015-1186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2009-1186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wordpress Plugin NextGEN Gallery <= 1.5.1 - XSS Vulnerability

No description provided by source. XSS Vulnerability in NextGEN Gallery Wordpress Plugin 1. Advisory Information Title: XSS Vulnerability in NextGEN Gallery Wordpress Plugin Advisory Id: CORE-2010-0323 Advisory URL: http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability Date...