129 matches found
CVE-2019-8259
UltraVNC revision 1198 contains multiple memory leaks CWE-655 in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...
CVE-2019-8258
UltraVNC revision 1198 contains a heap-based buffer overflow in the VNC client code that can lead to code execution and is exploitable over the network. The issue is fixed in revision 1199. Affected product: UltraVNC (VNC client component). Mitigation: upgrade to revision 1199 or later to remedia...
CVE-2017-1198
creationtimestamp| type| source ---|---|--- 2019-02-05 20:22:27+00:00| seen| https://t.me/cibsecurity/2399...
CVE-2017-1198
CVE-2017-1198 affects IBM BigFix Compliance 1.7–1.9.91 (TEMA SUAv1 SCA SCM). The underlying issue is that sensitive information is stored in URL parameters, enabling potential information disclosure if URLs are exposed in server logs, referrer headers, or browser history. The NVD entry notes expl...
CVE-2018-1198
CVE-2018-1198 affects Pivotal Cloud Cache versions prior to 1.3.1. The underlying issue is that a superuser password is printed in plain text in BOSH deployment logs, enabling a user with log access to escalate privileges. The available connected documents confirm the product/version and the exac...
CVE-2009-1198
Summary (CVE-2009-1198) : An XSS vulnerability exists in Apache jUDDI before 2.0. The flaw allows remote attackers to inject arbitrary web script or HTML via the dsname parameter to the happyjuddi.jsp page. Affected software is Apache jUDDI prior to version 2.0. The vulnerability is browser-execu...
SmartBear SoapUI 5.3.0 Remote Code Execution Via Deserialization Vulnerability
Exploit for java platform in category remote exploits Title: SmartBear SoapUI - Remote Code Execution via Deserialization Author: Jakub Palaczynski Date: 12. July 2017 Exploit tested on: ================== SoapUI 5.3.0 Also works on older versions. Vulnerability: Remote Code Execution via...
SmartBear SoapUI 5.3.0 Remote Code Execution Via Deserialization
Title: SmartBear SoapUI - Remote Code Execution via Deserialization Author: Jakub Palaczynski Date: 12. July 2017 Exploit tested on: ================== SoapUI 5.3.0 Also works on older versions. Vulnerability: Remote Code Execution via Deserialization: ================================= SoapUI by...
CVE-2015-1198
Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5...
CVE-2015-1198
CVE-2015-1198 affects the ha archiver package, specifically version 0.999p+dfsg-5, where multiple directory traversal vulnerabilities are present. The observed issue allows path traversal to read arbitrary files within the application context. This vulnerability is reflected across multiple sourc...
CVE-2015-1198
Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5...
CVE-2016-1198
CVE-2016-1198 affects Photopt for Android; before version 2.0.1 the app does not verify SSL certificates, enabling potential man-in-the-middle eavesdropping. Connected sources confirm impact and versions (Android 1.0.0/1.1.0 in some advisories; remediation involves updating to the latest version ...
Fedora Update for maradns FEDORA-2015-1198
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 4 : firefox (ELSA-2010-0500)
From Red Hat Security Advisory 2010:0500 : An updated firefox package that addresses security issues, fixes bugs, adds numerous enhancements, and upgrades Firefox to version 3.6.4, is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having...
CVE-2013-1198
Cisco UCS Central Software contains a DOM-based XSS vulnerability (CVE-2013-1198) in the Flash component. An unauthenticated, remote attacker could lure a user to a crafted URL and execute arbitrary script in the context of the affected site, potentially reading browser data. Cisco’s advisory con...
RHEL 5 : initscripts (RHSA-2012:0312)
The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2012:0312 advisory. - initscripts: IPSec ifup script allows for aggressive IKE mode CVE-2008-1198 Note that Nessus has not tested for this issue but has instead relied...
CVE-2012-1198
baseagmain.php in Basic Analysis and Security Engine BASE 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an executable extension via a create action, then accessing it via a view action...
CVE-2012-1198
baseagmain.php in Basic Analysis and Security Engine BASE 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an executable extension via a create action, then accessing it via a view action...
CVE-2012-1198
CVE-2012-1198 affects BASE 1.4.5. The issue occurs in base_ag_main.php where an attacker can upload a file with an executable extension via a create action and then access it via a view action, enabling remote code execution. The NVD entry assigns a CVSSv2 base score of 7.5 (HIGH) with network ac...