135 matches found
CVE-2023-1250
Improper Input Validation vulnerability in OTRS AG OTRS ACL modules, OTRS AG OTRS Community Edition ACL modules allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments and ACL-names This issue affects OTRS: from 7.0...
CVE-2023-1250
Improper Input Validation vulnerability in OTRS AG OTRS ACL modules, OTRS AG OTRS Community Edition ACL modules allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments and ACL-names This issue affects OTRS: from 7.0...
CVE-2023-1250
OTRS/OTRS Community Edition vulnerable to improper input validation in ACL modules, enabling local code execution via manipulated comments and ACL-names. Affected: OTRS 7.0.x before 7.0.42, 8.0.x before 8.0.31; CE 6.0.1 through 6.0.34. Remediation: upgrade to 7.0.42+ (or later), 8.0.31+ (or later...
CVE-2023-1250 Code execution through ACL creation
Improper Input Validation vulnerability in OTRS AG OTRS ACL modules, OTRS AG OTRS Community Edition ACL modules allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments and ACL-names This issue affects OTRS: from 7.0...
CVE-2014-125022 FFmpeg Bitstream Buffer shorten_decode_frame memory corruption
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shortendecodeframe of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this...
CVE-2014-125013 FFmpeg msrle.c msrle_decode_frame memory corruption
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrledecodeframe of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue...
CVE-2014-125010 FFmpeg h64.c decode_slice_header memory corruption
A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decodesliceheader of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue...
CVE-2014-125006 FFmpeg h264.c output_frame memory corruption
A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function outputframe of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this...
CVE-2022-1250
creationtimestamp| type| source ---|---|--- 2022-05-02 20:28:00+00:00| seen| https://t.me/cibsecurity/41735...
CVE-2022-1250
The CVE-2022-1250 entry pertains to the WordPress LifterLMS PayPal plugin prior to version 1.4.0, where parameters from the payment confirmation page are not properly sanitised/escaped before being echoed, causing a Reflected Cross‑Site Scripting vulnerability. Affected product: LifterLMS PayPal ...
SUSE: Security Advisory (SUSE-SU-2017:1250-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:1250-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1250
creationtimestamp| type| source ---|---|--- 2021-01-21 00:27:42+00:00| seen| https://t.me/cibsecurity/22465...
CVE-2021-1250
CVE-2021-1250 affects Cisco Data Center Network Manager (DCNM) Web management interface. The vulnerability set includes cross-site scripting (XSS) and a reflected file download (RFD) attack, exploitable by a remote attacker with network-operator privileges. Root cause cited as insufficient input ...
CVE-2000-1250
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2020-1250
Technical details about CVE-2020-1250, including affected products, root cause, impact, or patch specifics, are not provided in the connected documents. Monitor for updates from official advisories.
KB4577070: Windows Server 2008 September 2020 Security Update
The remote Windows host is missing security update 4577070 or cumulative update 4577064. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
KB4577053: Windows 7 and Windows Server 2008 R2 September 2020 Security Update
The remote Windows host is missing security update 4577053 or cumulative update 4577051. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1250)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...