128 matches found
CVE-2021-1249
Cisco Data Center Network Manager (DCNM) web-based management interface harbors cross-site scripting (XSS) and reflected file download (RFD) vulnerabilities. The root cause cited across sources is insufficient input validation in the DCNM web UI, enabling a remote attacker with network-operator p...
CVE-2020-1370
Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.
CVE-2020-1249
Technical details about CVE-2020-1249 are not publicly provided in the supplied documents. No affected products, exploit specifics, or remediation information are confirmed here. Monitor for official disclosures and updates.
Microsoft Windows Jet Database Remote Code Execution (CVE-2019-1249)
A remote code execution vulnerability exists in the Jet Database Engine component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted file. Successful...
Remote code execution
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-124...
CVE-2019-1249
CVE-2019-1249 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could trigger arbitrary code execution by convincing a user to open a specially crafted file, with the impact described as remote code exe...
Microsoft Windows Multiple Vulnerabilities (KB4515384)
This host is missing a critical security update according to Microsoft KB4515384 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Multiple Vulnerabilities (KB4516070)
This host is missing a critical security update according to Microsoft KB4516070 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
KB4516064: Windows 8.1 and Windows Server 2012 R2 September 2019 Security Update
The remote Windows host is missing security update 4516064 or cumulative update 4516067. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of inpu...
KB4515384: Windows 10 Version 1903 September 2019 Security Update
The remote Windows host is missing security update 4515384. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...
Amazon Linux 2 : ruby (ALAS-2019-1249)
An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to stdout. Therefore, if the response is crafted, escape sequence injection may occur. CVE-2019-8322 An issue was discovered in RubyGems 2.6 and later through...
CVE-2018-1249
Dell EMC iDRAC9: CVE-2018-1249 affects versions prior to 3.21.21.21; the issue is failure to enforce TLS/SSL for certain URLs to the iDRAC web server, enabling MITM to strip protection. Affected component: iDRAC9 web interface. Root cause: TLS/SSL enforcement not applied for specific URLs (as sta...
Debian DLA-1249-2 : smarty3 regression update
It was previously discovered that there was a code-injection vulnerability in smarty3, a PHP template engine. A via specially crafted filename in comments could result in arbitrary code execution. However, the fix in 3.1.10-2+deb7u2 was incorrect. For Debian 7 'Wheezy', this regression has been...
Updated perl-DBD-mysql packages fix security vulnerability
Pali Rohar discovered that DBD::mysql constructed an error message in a fixed-length buffer, leading to a crash FORTIFYSOURCE failure and, potentially, to denial of service CVE-2016-1246. A vulnerability was discovered in perl-DBD-MySQL that can lead to an out-of-bounds read when using server sid...
ucjepsarchives.berkeley.edu XSS vulnerability
Vulnerable URL: http://ucjepsarchives.berkeley.edu/archon/index.php?p=collections/research=email=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1249 VIP website status:| Ye...
CVE-2017-1249
IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
Trend Micro Deep Discovery Director Multiple Vulnerabilities
1. Advisory Information Title: Trend Micro Deep Discovery Director Multiple Vulnerabilities Advisory ID: CORE-2017-0005 Advisory URL:https://www.coresecurity.com/core-labs/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities Date published: 2017-07-12 Date of last update:...
CVE-2016-1249
CVE-2016-1249 affects the DBD::mysql Perl module prior to 4.039 when using server-side prepared statements, enabling a potential denial of service via an out-of-bounds read caused by an unaligned number of placeholders in WHERE conditions and in SELECT output fields. The issue is in libdbd-mysql-...
openSUSE Security Update : perl-DBD-mysql (openSUSE-2017-130)
This update for perl-DBD-mysql fixes the following issues : - CVE-2016-1251: A use-after-free when used with mysqlserverprepare=1 bsc1012546. - CVE-2016-1246: Buffer overflow allowed context-dependent attackers to cause a denial of service crash via vectors related to an error message bsc1002626....