CVE-2018-1290

In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsApiResource Class and retrieveCommands of...

CVE-2018-1290

Apache Fineract vulnerability CVE-2018-1290 is confirmed in multiple 1.0.x/0.x-incubating releases. The issue is an SQL injection caused by improper handling of a single quotation escape with two consecutive SQL parameters, exploitable via methods such as retrieveAuditEntries (AuditsApiResource) ...

Debian DLA-1290-1 : libvpx security update

CVE-2017-13194 Fix for a flaw in libvpx related to odd frame width, which may lead to a denial of service. For Debian 7 'Wheezy', these problems have been fixed in version 1.1.0-1+deb7u1. We recommend that you upgrade your libvpx packages. NOTE: Tenable Network Security has extracted the precedin...

CVE-2015-1290

The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted web site...

CVE-2015-1290

CVE-2015-1290 affects the Google V8 JavaScript engine used by Chrome (pre-44.0.2403.89) and QtWebEngineCore in Qt (pre-5.5.1). The vulnerability allows remote attackers to cause memory corruption or execute arbitrary code via a crafted website, leading to denial of service or code execution. Affe...

CVE-2017-1290

IBM OpenPages GRC Platform versions 7.1–7.3 are reported vulnerable to cross-site scripting, allowing an attacker to inject JavaScript into the Web UI. The issue affects OpenPages GRC Platform 7.1, 7.2, and 7.3 as described in IBM’s bulletin. Remediation is provided via versioned fixes: 7.3.0.1 o...

CVE-2016-1290

The web API in Cisco Prime Infrastructure 1.2.0 through 2.22 and Cisco Evolved Programmable Network Manager EPNM 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227...

CVE-2016-1290

The CVE-2016-1290 issue affects Cisco Prime Infrastructure 1.2.0–2.2(2) and Cisco EPNM 1.2. The vulnerability stems from the web API allowing an authenticated remote user to bypass RBAC via an HTTP request that does not conform to a pattern filter, enabling elevated privileges (Bug CSCuy10227). P...

Google Chrome Multiple Vulnerabilities-01 (Jul 2015) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2014-1290

CVE-2014-1290 affects WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. It is described as a distinct issue from CVE-2014...

Apple TV < 6.1 Multiple Vulnerabilities

According to its banner, the remote Apple TV 2nd generation or later device is prior to 6.1. It is, therefore, reportedly affected by multiple vulnerabilities, the most serious issues of which could result in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2013-1290

CVE-2013-1290 affects Microsoft SharePoint Server 2013 in configurations using legacy My Sites, where default access controls for a SharePoint list are not properly enforced. This allows remote authenticated users to disclose list item data by directly requesting a list’s location, i.e., informat...

CVE-2012-1290

The CVE-2012-1290 entry describes a Cross-site scripting (XSS) vulnerability in SAP NetWeaver 7.0, specifically in the Internet Sales (crm.b2b) module and the b2b/auction/container.jsp page. The issue is exploitable via the _loadPage parameter, allowing an attacker to inject arbitrary web script ...

Debian: Security Advisory (DSA-2192-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple iTunes < 10.2.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 10.2.2. It is, therefore, affected by multiple vulnerabilities in the WebKit component : - An integer overflow vulnerability exists in the handling of nodesets that can be exploited by a remote attacker to execute arbitrary code...

About the security content of Safari 5.0.5

About the security content of Safari 5.0.5 Last Modified: April 14, 2011 Article: HT4596 Email this article Print this page Summary This document describes the security content of Safari 5.0.5. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until...

Apple iTunes < 10.2.2 Multiple (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2.2. As such, it is potentially affected by several issues : - An integer overflow issue in the handling of nodesets could lead to a crash or arbitrary code execution. CVE-2011-1290 - A use after free issue in the...

[SECURITY] [DSA 2192-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2192-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2011 http://www.debian.org/security/faq -...

Debian DSA-2192-1 : chromium-browser - several vulnerabilities

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0779 Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a...

[SECURITY] [DSA 2192-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2192-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2011 http://www.debian.org/security/faq -...