CVE-2013-1202

Cisco ACE A2(3.6) is affected by a log-retention Denial of Service vulnerability (CVE-2013-1202). The flaw occurs in the SSL logging daemon where logs are not rotated, exhausting disk space and leading to DoS. An unauthenticated, remote attacker could exploit by opening many SSL connections to th...

CVE-2015-1202

...

CVE-2015-1202

CVE-2015-1202 is rejected/not used; this ID does not represent an active vulnerability entry.

CVE-2019-1202

CVE-2019-1202 affects Microsoft SharePoint where session objects are mishandled, enabling an authenticated attacker to hijack another user’s session. The root cause is improper handling of session objects within SharePoint. A specially crafted application could be used to exploit the flaw. Remedi...

CVE-2019-1202 SharePoint Information Disclosure Vulnerability

...

Microsoft SharePoint CVE-2019-1202 Information Disclosure Vulnerability

Description Microsoft SharePoint is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2010 SP2...

Amazon Linux AMI : python34 (ALAS-2019-1202)

Python is affected by improper Handling of Unicode Encoding with an incorrect netloc during NFKC normalization. The impact is information disclosure credentials, cookies, etc. that are cached against a given hostname. The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack...

Denial Of Service (DoS)

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. A heap-based buffer overflow flaw was found in the way libxslt applied templates...

CVE-2017-1202

creationtimestamp| type| source ---|---|--- 2019-02-05 20:22:25+00:00| seen| https://t.me/cibsecurity/2397...

CVE-2017-1202

CVE-2017-1202 affects IBM BigFix Compliance 1.7–1.9.91 (TEMA SUAv1 SCA SCM). The vulnerability is HTML injection that could allow a remote attacker to inject HTML code, which would execute in the victim’s browser within the hosting site’s security context when viewed. No exploitation details or p...

Dell EMC Isilon OneFS - Multiple Vulnerabilities

Exploit for linux platform in category web applications Dell EMC Isilon OneFS Multiple Vulnerabilities 1. Advisory Information Title: Dell EMC Isilon OneFS Multiple Vulnerabilities Advisory ID: CORE-2017-0009 Advisory URL:...

Dell EMC Isilon OneFS XSS / Code Execution / CSRF

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Dell EMC Isilon OneFS Multiple Vulnerabilities 1. Advisory Information Title: Dell EMC Isilon OneFS Multiple Vulnerabilities Advisory ID: CORE-2017-0009 Advisory URL:...

CVE-2018-1202

creationtimestamp| type| source ---|---|--- 2018-02-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44039...

carbon (>=0.3.0 <=0.4.0), carbon-logger (=0.1.0) +3 more potentially affected by CVE-2016-1202 via electron (>=0.1.2 <=0.2.1)

electron NPM version =0.1.2, =0.3.0, =0.1.0, =0.2.0, =0.2.2 Source cves: CVE-2016-1202 Source advisory: OSV:GHSA-GVCJ-PFQ2-WXJ7...

CVE-2016-1202

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line...

CVE-2016-1202

CVE-2016-1202 affects Electron up to version before 0.33.5, where untrusted search path logic allows local attackers to escalate privileges by placing a malicious Node.js module in a parent directory of a require path. Core issue: Electron does not restrict the search path for loading Node module...

gorillavid.in XSS vulnerability

Vulnerable URL: http://gorillavid.in/?op=registersave=gqyul32nc74ypahqdih5rjvfj6lo5p2xg52qjvilogin=email="autofocus/onfocus="alert'XSSPOSED'"password=password2=payemail=paytype=code== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS...

Oracle: Security Advisory (ELSA-2011-0471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-1202)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOAPUI Remote Code Execution - Ver2 (CVE-2014-1202)

A code execution vulnerability has been reported in Eviware SoapUI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...