90 matches found
CVE-2021-1277
creationtimestamp| type| source ---|---|--- 2021-01-20 22:27:39+00:00| seen| https://t.me/cibsecurity/22448...
CVE-2021-1277
CVE-2021-1277 relates to Cisco Data Center Network Manager (DCNM) certificate validation vulnerabilities. The root cause is insufficient certificate validation when DCNM establishes HTTPS connections, enabling an attacker to spoof a trusted host or perform a MITM to intercept/alter sensitive API ...
CVE-2020-1277
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...
Privilege escalation
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...
CVE-2020-1277
The CVE-2020-1277 entry relates to an elevation of privilege in Windows Installer. Connected CNVD entries describe the flaw as arising from how Windows Installer handles certain file system operations (some variants mention improper handling/cleanup of input) which can enable a local attacker to ...
Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2020-1277)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-1277
An elevation of privilege vulnerability exists in Windows Audio Service when a malformed parameter is processed, aka 'Windows Audio Service Elevation of Privilege Vulnerability'...
CVE-2019-1277
CVE-2019-1277 describes an elevation of privilege vulnerability in the Windows Audio Service triggered by processing a malformed parameter. The affected component is Windows Audio Service on Windows systems. Root cause: malformed parameter handling leading to unauthorized privilege escalation. CV...
Microsoft Windows Multiple Vulnerabilities (KB4515384)
This host is missing a critical security update according to Microsoft KB4515384 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Audio Service CVE-2019-1277 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain the elevated privileges on the system. Technologies Affected Microsoft Windows 10 Version 1709 for ARM64-based Systems Microsoft Windows 10 Version 1803 for 32-bit...
Siemens SIPLUS NET CSM 1277 Communications Adapter Detection
Binary data 750142.prm...
Security Bulletin: A Security Vulnerability affects IBM Cloud Private Cloud Foundry (CVE-2018-1277)
Summary IBM Cloud Private Cloud Foundry is vulnerable to a security vulnerability Vulnerability Details CVEID: CVE-2018-1277 DESCRIPTION: Cloud Foundry garden-runc-release and cf-deployment are vulnerable to a denial of service, caused by the failure to correctly enforce disc quotas for Docker...
CVE-2017-1277
CVE-2017-1277 affects IBM Rational Quality Manager (RQM) and IBM Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5. The vulnerability is a cross-site scripting flaw that lets an attacker embed arbitrary JavaScript in the Web UI, potentially leading to credential ...
CVE-2018-1277
Cloud Foundry Garden-runC vulnerability (CVE-2018-1277): Garden-runC/ cf-deployment prior to fixed versions fail to enforce disk quotas for Docker image layers, allowing a remote authenticated user to push a malicious image that can exhaust Diego cell disk space and cause a DoS. Affected: Garden-...
CVE-2016-1277
Juniper Junos OS versions listed (various 12.1X, 12.3X, 13.3, 14.x, 15.x) are affected when GRE or IPIP tunnels are configured. The issue is triggered by a crafted ICMP packet, causing a remote kernel panic and resulting in a denial of service. The attack is network-reachable and does not require...
Oracle Linux 7 : kernel (ELSA-2016-1277)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1277 advisory. - infiniband security: Restrict use of the write interface Don Dutile 1332553 1316685 CVE-2016-4565 - net sctp: Prevent soft lockup when sctpaccept is...
CentOS Update for kernel CESA-2016:1277 centos7
Check the version of kernel SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882511";...
Google Chrome < 44.0.2403.89 Multiple Vulnerabilities
Binary data 8853.pasl...
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2677-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2677-1 advisory. An uninitialized value issue was discovered in ICU. If a user were tricked in to opening a specially crafted website, an attacker could potentially explo...
Updated chromium-browser package fixes security vulnerabilities
Chromium-browser 44.0.2403.107 fixes several security issues: PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other...