CVE-2023-1223

Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1223

CVE-2023-1223 concerns insufficient policy enforcement in Autofill on Chromium-derived Chrome/Android builds prior to 111.0.5563.64, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Connected feeds confirm the remediation: Chromium/Chrome update to 111.0.5563.64 (and ...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 111 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 111.0.5563.64 Linux and Mac, 111.0.5563.64/.65 Windows contains a number of fixes and improvements -- a list of changes is...

[SECURITY] [DSA 5354-1] snort security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5354-1 [email protected] https://www.debian.org/security/ Markus Koschany February 18, 2023 https://www.debian.org/security/faq -...

phpIPAM < 1.4.6 Multiple Vulnerabilities

phpIPAM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpipam:phpipam"; ifdescription...

CVE-2022-1223

creationtimestamp| type| source ---|---|--- 2022-04-04 14:27:37+00:00| seen| https://t.me/cibsecurity/40085 2024-01-20 14:54:34+00:00| seen| https://t.me/arpsyndicate/2964...

CVE-2022-1223

Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...

CVE-2022-1223 Incorrect Authorization in phpipam/phpipam

Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...

CVE-2022-1223

CVE-2022-1223 refers to an incorrect authorization issue in the phpIPAM project before version 1.4.6. The available records consistently describe an access-control flaw in phpIPAM’s GitHub repository leading to potential exposure of subnet data due to improper permission checks. The vulnerability...

Cisco Firepower Threat Defense HTTP Detection Engine File Policy Bypass (cisco-sa-snort-filepolbypass-67DEwMe2)

According to its version and configuration, the Cisco Firepower Threat Defense FTD Software running on the remote device is affected by affected by a file policy bypass vulnerability due to the incorrect handling of a HTTP range header. An unauthenticated, remote attacker could send a carefully...

CVE-2021-1223

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of an HTTP range header. An attacker could exploit this...

CVE-2021-1223

CVE-2021-1223 affects Cisco products with the Snort detection engine, where incorrect handling of HTTP range header (per Cisco/NVD wording) could allow an unauthenticated, remote attacker to bypass a configured HTTP file policy and deliver a malicious payload by sending crafted HTTP packets throu...

CVE-2020-1223

A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file.The update addresses the vulnerability by correcting how Microsoft Word...

CVE-2020-1223

CVE-2020-1223 : A remote code execution vulnerability in Microsoft Word for Android exists when the application fails to properly handle certain files, requiring a user to open a specially crafted URL file. From multiple sources, including NVD, Red Hat, CNVD, CNVD, and Microsoft advisory, the iss...

CVE-2019-1223

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f...

CVE-2019-1223

The CVE-2019-1223 entry describes a denial-of-service in Remote Desktop Protocol (RDP) where an attacker can cause the RDP service to stop responding by sending specially crafted connection requests. The vulnerability arises in how RDP handles connection requests, enabling network-based DoS when ...

CVE-2019-1223 Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability

...

Amazon Linux AMI : python-jinja2 (ALAS-2019-1223)

In Pallets Jinja, str.format allows a sandbox escape. CVE-2016-10745 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2019-1223. include'compat.inc'; if description scriptid125902; scriptversion"1.3...

openSUSE: Security Advisory for SDL (openSUSE-SU-2019:1223-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-1223

CVE-2018-1223 affects Cloud Foundry Container Runtime (kubo-release) before 0.14.0. The issue leaks UAA and vCenter credentials to application logs, which a logged-read attacker could exploit to escalate privileges. Affected component/file: logging/output of kubo-release prior to 0.14.0. Impact: ...