Lucene search
+L

247 matches found

Circl
Circl
added 2021/01/14 12:55 a.m.10 views

CVE-2021-1196

creationtimestamp| type| source ---|---|--- 2021-01-14 00:55:01+00:00| seen| https://t.me/cibsecurity/22138...

9CVSS7AI score0.02194EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/13 9:22 p.m.78 views

CVE-2021-1196

The CVE-2021-1196 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. Affects the web-based management interface and is due to improper validation of user-supplied input. An authenticated, remote attacker with valid administrator credentials could send crafted HTTP requ...

9CVSS7.3AI score0.02194EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2020/06/10 12:00 a.m.93 views

Microsoft Windows Multiple Vulnerabilities (KB4561612)

This host is missing a critical security update according to Microsoft KB4561612 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.4AI score0.59518EPSS
SaveExploits2References3
NVD
NVD
added 2020/06/09 8:15 p.m.14 views

CVE-2020-1196

An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configuration Elevation of Privilege Vulnerability'...

7.8CVSS0.00708EPSS
SaveExploits1References1
CVE
CVE
added 2020/06/09 7:43 p.m.119 views

CVE-2020-1196

CVE-2020-1196 is described as an elevation of privilege vulnerability in Windows Print Configuration, caused by how printconfig.dll handles objects in memory. The CVE entry notes local access is required with low attack complexity, and the impact is high on confidentiality, integrity, and availab...

7.8CVSS8.1AI score0.00708EPSS
SaveExploits1References1Affected Software8
Tenable Nessus
Tenable Nessus
added 2020/06/09 12:00 a.m.58 views

KB4561602: Windows 10 Version 1709 June 2020 Security Update

The remote Windows host is missing security update 4561602. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execu...

9.3CVSS8.1AI score0.59518EPSS
SaveExploits2References85
Tenable Nessus
Tenable Nessus
added 2020/03/13 12:00 a.m.41 views

EulerOS Virtualization for ARM 64 3.0.2.0 : patch (EulerOS-SA-2020-1225)

According to the versions of the patch package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pchwriteline in pch.c can possibly lead t...

9.3CVSS6.8AI score0.09334EPSS
SaveExploits2References6
OpenVAS
OpenVAS
added 2020/03/13 12:00 a.m.71 views

Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2020-1225)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.3AI score0.09334EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.29 views

Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2019-2645)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.3AI score0.09334EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.36 views

Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2019-2428)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.9AI score0.06146EPSS
SaveExploits1References2
OSV
OSV
added 2019/11/25 4:15 p.m.11 views

CVE-2015-1396

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...

7.5CVSS7.5AI score
SaveExploits0References4
CVE
CVE
added 2019/08/14 8:55 p.m.115 views

CVE-2019-1196

The CVE-2019-1196 issue is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine due to memory handling of objects. The impact is execution of arbitrary code in the current user context with potential full system control if the user has admin rights. The conditionally ...

7.6CVSS7.5AI score0.01934EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/14 8:55 p.m.35 views

CVE-2019-1196 Chakra Scripting Engine Memory Corruption Vulnerability

...

4.2CVSS6.4AI score0.01934EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2019/08/14 8:55 p.m.13 views

CVE-2019-1196 Chakra Scripting Engine Memory Corruption Vulnerability

...

4.2CVSS4.5AI score0.01934EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2019/08/13 12:00 a.m.37 views

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1196)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS5.1AI score0.01934EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/05/10 12:00 a.m.43 views

SUSE SLES12 Security Update : libapr1 (SUSE-SU-2018:1196-1)

This update fixes the following issues : - CVE-2017-12613: DoS or information disclosure in prexptime or aprosexptime functions bsc1064982. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

7.1CVSS6.3AI score0.01749EPSS
SaveExploits0References4
NVD
NVD
added 2018/03/19 6:29 p.m.42 views

CVE-2018-1196

Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...

5.9CVSS5.7AI score0.01199EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/19 6:00 p.m.56 views

CVE-2018-1196

Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...

5.7AI score0.01199EPSS
SaveExploits0References1
CVE
CVE
added 2018/03/19 6:00 p.m.117 views

CVE-2018-1196

The CVE-2018-1196 issue affects Spring Boot when using the embedded launch script to run as a systemd/init.d service. The root cause is a symlink attack on the run_user, enabling overwriting/taking ownership of files on the same system if the app is installed as a service and the run_user has she...

5.9CVSS5.6AI score0.01199EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2018/02/05 12:20 p.m.36 views

CVE-2018-1196

Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...

6.8CVSS3.1AI score0.01199EPSS
SaveExploits0References2
Rows per page
Query Builder