SUSE: Security Advisory (SUSE-SU-2022:1183-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : kernel (ELSA-2022-1198)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1198 advisory. - RDMA/cma: Do not change route.addr.srcaddr.ssfamily Kamal Heib 2032075 CVE-2021-4028 - fget: clarify and improve fgetfiles implementation Miklos...

RHEL 7 : kernel (RHSA-2022:1198)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1198 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in RDMA listen...

CVE-2021-1198

Cisco CVE-2021-1198 affects the Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The flaws reside in the web-based management interface due to improper validation of user-supplied input, exploitable by an authenticated remote attacker who can send crafted HTTP requests to the devic...

CVE-2020-1198

CVE-2020-1198 is a Microsoft SharePoint Server XSS vulnerability where a crafted request to an affected SharePoint server is not properly sanitized. An authenticated attacker could execute scripts in the user’s browser, access data they aren’t authorized to read, and perform actions in the user’s...

Description of the security update for SharePoint Server 2019: September 8, 2020

None None...

Description of the security update for SharePoint Foundation 2013: September 8, 2020

Description of the security update for SharePoint Foundation 2013: September 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Description of the security update for SharePoint Enterprise Server 2013: September 8, 2020

None None...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2017-1198)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-1198

An elevation of privilege exists in SyncController.dll. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This...

CVE-2019-1198

CVE-2019-1198 is a Microsoft Windows elevation of privilege vulnerability in SyncController.dll. An attacker who successfully exploits the flaw could run arbitrary code with elevated privileges, using a specially crafted application. The vulnerability by itself does not enable arbitrary code exec...

CVE-2019-1198 Microsoft Windows Elevation of Privilege Vulnerability

...

Microsoft Windows CVE-2019-1198 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on the system or gain unauthorized access. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft...

UltraVNC Buffer Overflow Vulnerability

UltraVNC is an open source remote terminal control software for the Windows platform. A buffer overflow vulnerability exists in the VNC client code in UltraVNC version 1198. An attacker could exploit this vulnerability to execute code...

Heap overflow

UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199...

CVE-2019-8259

UltraVNC revision 1198 contains multiple memory leaks CWE-655 in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...

CVE-2019-8258

UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199...

Buffer overflow

UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199...

CVE-2019-8258

UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199...

CVE-2018-15361

UltraVNC revision 1198 contains a buffer underflow in the VNC client code that could potentially allow code execution. The vulnerability is exploitable over network connectivity, and Siemens/CISA context confirms the fix is to upgrade to revision 1199. No further technical details are provided in...