125 matches found
CVE-2023-1298
creationtimestamp| type| source ---|---|--- 2023-07-06 22:20:34+00:00| seen| https://t.me/cibsecurity/66156...
CVE-2023-1298
CVE-2023-1298 affects ServiceNow Polaris Layout. A reflected XSS vulnerability could let an authenticated user inject arbitrary scripts. The CVSS v3.1 base score is 6.1 (Medium); vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. Exploitation requires user interaction and has network access, with a ch...
CVE-2022-1298
creationtimestamp| type| source ---|---|--- 2022-05-23 12:35:34+00:00| seen| https://t.me/cibsecurity/43148...
CVE-2022-1298
CVE-2022-1298 affects the WordPress Tabs plugin up to version 2.2.8. The vulnerability arises from failure to sanitize and escape Tab descriptions, enabling stored Cross-Site Scripting (XSS) by users with a role as low as editor, even when unfiltered_html is disallowed. The impact is stored XSS t...
Slackware: Security Advisory (SSA:2009-342-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:1298-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2015:1298-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2021-1298)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1298 advisory. 1:1.8.0.292.b10-1 - Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz1938201 1:1.8.0.292.b10-0 - Update to...
CVE-2020-1298
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297...
CVE-2020-1298
Technical details for CVE-2020-1298 are not publicly provided in the connected documents. Monitor for updates; current materials do not specify affected products, root cause, impact, or fixes beyond the initial description.
Description of the security update for SharePoint Foundation 2013: June 9, 2020
Description of the security update for SharePoint Foundation 2013: June 9, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
CVE-2011-1298
An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function...
CVE-2011-1298
The CVE-2011-1298 entry describes an integer overflow in WebKit’s macOS WebCore::GraphicsContext::fillRect, affecting Google Chrome before Blink M11. Connected sources replicate the same root cause (integer overflow) within WebKit used by Chrome on macOS. The NVD entry confirms the vulnerability ...
Amazon Linux 2 : nghttp2 (ALAS-2019-1298) (Data Dribble) (Resource Loop)
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...
Amazon Linux AMI : nghttp2 (ALAS-2019-1298) (Data Dribble) (Resource Loop)
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...
CVE-2019-1298
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1237, CVE-2019-1300...
CVE-2019-1298
Technical details for CVE-2019-1298 are not publicly available in the provided documents. Monitor for updates from the sources in this dataset.
Microsoft Windows Multiple Vulnerabilities (KB4515384)
This host is missing a critical security update according to Microsoft KB4515384 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Debian: Security Advisory (DLA-1298-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...