CVE-2019-8263

UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service DoS condition. This attack appear to be exploitable via network connectivity. User interaction is required to trigger this vulnerability. This...

Security Bulletin: Privilege Escalation / User Impersonation affects IBM Platform LSF and IBM Spectrum LSF

Summary This is to address security vulnerabilities in IBM Spectrum LSF and IBM Platform LSF Load Sharing Facility that could allow a local attacker to impersonate arbitrary users to submit jobs to LSF, and possibly run LSF jobs as root. LSF uses an external authentication framework to secure use...

Dell EMC ScaleIO Buffer Overflow / Command Injection Vulnerability

Dell EMC ScaleIO customers are encouraged to update to ScaleIO version 2.5, which contains fixes for multiple security vulnerabilities in earlier ScaleIO software versions that could potentially be exploited by malicious users to compromise the affected system. Dell EMC Identifier: DSA-2018-058 C...

CVE-2018-1205

Dell EMC ScaleIO (pre-2.5) is affected by CVE-2018-1205 due to improper handling of packet data in the MDM service. A remote attacker could exploit crafted packets to crash the MDM service. The CVE is documented with a CVSS v3 base score of 7.5 (HIGH) and CVSS v2 base score of 5.0 (MEDIUM). Publi...

IBM Spectrum LSF Privilege Escalation Vulnerability

A vulnerability was identified within IBM Spectrum LSF which made it was possible to impersonate other users when submitting jobs for execution. Additionally, it was found to be possible to impersonate and execute jobs as root, even where root job submission is disabled. Versions affected include...

Debian DLA-1205-1 : simplesamlphp security update

The simplesamlphp package in wheezy is vulnerable to multiple attacks on authentication-related code, leading to unauthorized access and information disclosure. CVE-2017-12867 The SimpleSAMLAuthTimeLimitedToken class allows attackers with access to a secret token to extend its validity period by...

CentOS Update for spice-server CESA-2016:1205 centos7

Check the version of spice-server SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882502";...

RedHat Update for spice RHSA-2016:1205-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-1205

CVE-2016-1205 is a cross-site scripting (XSS) vulnerability in EC-CUBE shiro8 Co., Ltd. plugins “category_freearea_ addition_plugin” and “itemdetail_freearea_ addition_plugin” (version 1.0). The underlying issue is CWE-79, enabling remote attackers to inject arbitrary web script/HTML via unspecif...

CVE-2007-4049

No description is available for this CVE...

Oracle: Security Advisory (ELSA-2010-0534)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1359

CVE-2015-1359 concerns Google Chrome/Chromium PDFium, where multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h (PDF rendering) during processing of crafted PDFs can cause a denial of service (buffer overflow) or related impact. The vulnerability is tied to Chrome builds before 40.0.2214.9...

CVE-2015-1205

Technical details about CVE-2015-1205 are not publicly provided in the supplied documents. No affected product/version or root cause is specified here. Monitor for updates in connected sources.

UBUNTU-CVE-2015-1205

Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

Cisco WebEx Meetings Server 信息泄漏漏洞(CVE-2013-1205)

Bugtraq ID:60373 CVE ID:CVE-2013-1205 Cisco WebEx是一款网络会议解决方案 Cisco WebEx Meetings Server事件中心模块存在一个安全漏洞，由于不正确处理特制的请求，允许远程攻击者利用漏洞提交特制的URL获取事件密码和主机KEY 0 Cisco WebEx Meetings Server 1.0 厂商解决方案 用户可联系厂商获取相应的升级程序或补丁： http://www.cisco.com...

CVE-2013-1205

CVE-2013-1205 affects the Event Center module of Cisco WebEx Meetings Server. The issue is that certain requests are not authenticated, enabling remote attackers to discover host keys and event passwords via crafted URLs. The vulnerability is described in Cisco’s advisory and related CVE records,...

Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. CVE-2010-1211, CVE-2010-2753, CVE-2010-1214 A memory corruption fl...

DSquare Exploit Pack: D2SEC_WPRELOCATE

Name| d2secwprelocate ---|--- CVE| CVE-2012-1205 Exploit Pack| D2ExploitPack Description| Wordpress Relocate Upload 0.14 Local File Include Vulnerability Notes|...

CVE-2012-1205

CVE-2012-1205 affects WordPress Relocate Upload plugin before 0.20. It is a PHP Remote File Inclusion via abspath in relocate-upload.php, allowing an attacker to execute arbitrary PHP code remotely. Affected component is the Relocate Upload plugin’s relocate-upload.php; root cause is improper han...

Ubuntu: Security Advisory (USN-1205-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...