247 matches found
CVE-2021-1196
creationtimestamp| type| source ---|---|--- 2021-01-14 00:55:01+00:00| seen| https://t.me/cibsecurity/22138...
CVE-2021-1196
The CVE-2021-1196 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. Affects the web-based management interface and is due to improper validation of user-supplied input. An authenticated, remote attacker with valid administrator credentials could send crafted HTTP requ...
Microsoft Windows Multiple Vulnerabilities (KB4561612)
This host is missing a critical security update according to Microsoft KB4561612 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1196
An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configuration Elevation of Privilege Vulnerability'...
CVE-2020-1196
CVE-2020-1196 is described as an elevation of privilege vulnerability in Windows Print Configuration, caused by how printconfig.dll handles objects in memory. The CVE entry notes local access is required with low attack complexity, and the impact is high on confidentiality, integrity, and availab...
KB4561602: Windows 10 Version 1709 June 2020 Security Update
The remote Windows host is missing security update 4561602. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execu...
EulerOS Virtualization for ARM 64 3.0.2.0 : patch (EulerOS-SA-2020-1225)
According to the versions of the patch package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pchwriteline in pch.c can possibly lead t...
Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2020-1225)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2019-2645)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2019-2428)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1396
A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...
CVE-2019-1196
The CVE-2019-1196 issue is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine due to memory handling of objects. The impact is execution of arbitrary code in the current user context with potential full system control if the user has admin rights. The conditionally ...
CVE-2019-1196 Chakra Scripting Engine Memory Corruption Vulnerability
...
CVE-2019-1196 Chakra Scripting Engine Memory Corruption Vulnerability
...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1196)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SUSE SLES12 Security Update : libapr1 (SUSE-SU-2018:1196-1)
This update fixes the following issues : - CVE-2017-12613: DoS or information disclosure in prexptime or aprosexptime functions bsc1064982. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...
CVE-2018-1196
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...
CVE-2018-1196
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...
CVE-2018-1196
The CVE-2018-1196 issue affects Spring Boot when using the embedded launch script to run as a systemd/init.d service. The root cause is a symlink attack on the run_user, enabling overwriting/taking ownership of files on the same system if the app is installed as a service and the run_user has she...
CVE-2018-1196
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...