83 matches found
CVE-2022-1259
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629...
CVE-2022-1259
CVE-2022-1259 is an Undertow-related denial-of-service issue. The root cause is an incomplete fix for CVE-2021-3629, causing potential DoS from HTTP/2 flow-control handling. Connected documents (Nessus plugin references and IBM/Red Hat advisories) confirm this in context of Undertow and note that...
Huawei EulerOS: Security Advisory for SDL (EulerOS-SA-2022-1259)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2015-0235)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco SD-WAN vManage Software Path Traversal (cisco-sa-vman-pathtrav-Z5mCVsjf)
According to its self-reported version, Cisco SD-WAN vManage Software is affected by a vulnerability in the web-based management interface due to insufficient validation of HTTP requests. An authenticated, remote attacker can exploit this, by sending crafted HTTP requests, in order to conduct pat...
CentOS 8 : dotnet (CESA-2019:1259)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1259 advisory. - dotnet: NuGet Tampering Vulnerability CVE-2019-0757 - dotnet: timeouts for regular expressions are not enforced CVE-2019-0820 - dotnet: infinite loop...
CVE-2021-1259
Cisco SD-WAN vManage Software is affected by a path traversal vulnerability in its web-based management interface. The issue stems from insufficient validation of HTTP requests, enabling an authenticated remote attacker to craft requests containing directory traversal sequences and write arbitrar...
CVE-2020-1259
CVE-2020-1259 affects Windows Host Guardian Service. The vulnerability is a security feature bypass caused by improper handling of hashes that are recorded/logged. The provided documents do not specify the affected versions, exact exploit details, impact, or a remediation/patch. Microsoft MS advi...
Huawei EulerOS: Security Advisory for poppler (EulerOS-SA-2017-1259)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1259)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-1259
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery CSRF.To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka...
CVE-2019-1259
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery CSRF.To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka...
Cross site request forgery (csrf)
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery CSRF.To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka...
CVE-2019-1259
CVE-2019-1259 is a Microsoft SharePoint CSRF/spoofing vulnerability. The initial description and multiple connected entries indicate the issue arises when SharePoint improperly handles requests to authorize applications, enabling cross-site request forgery via a malicious page. The vulnerability ...
openSUSE Security Update : libqt5-qtvirtualkeyboard (openSUSE-2019-1259)
This update for libqt5-qtvirtualkeyboard fixes the following issues : Security issue fixed : - CVE-2018-19865: Fixed an issue with verbose keypress logging boo1118593. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Security Bulletin: IBM Security Guardium is affected by Password in Clear Text vulnerability (CVE-2017-1259)
Summary IBM Security Guardium transmits user credentials in plain in clear text which can be read by an attacker. IBM Security Guardium has provided a fix for this vulnerability. Vulnerability Details CVEID: CVE-2017-1259 DESCRIPTION: IBM Security Guardium transmits user credentials in plain in...
Important: Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Spring Boot security and bug fix update
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2018-1259
CVE-2018-1259 involves Spring Data Commons (versions 1.13 before 1.13.12 and 2.0 before 2.0.7) used with XMLBeam 1.4.14 or earlier. The vulnerability is due to improper restriction of XML external entity references, causing an XMLBeam-based property binder to be vulnerable to an XXE attack. An un...
