119 matches found
Microsoft Windows Multiple Vulnerabilities (KB4525237)
This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Multiple Vulnerabilities (KB4523205)
This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
CVE-2019-1310
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1309,...
CVE-2019-1310
Technical details for CVE-2019-1310 are not provided in the connected documents. Based on the initial description, no affected product/version or remediation details are available here. Monitor for updates from authoritative sources.
CVE-2018-1310
Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. See ActiveMQ CVE-2015-5254 announcement for more information. The fix to upgrade the activemq-client library to 5.15.3 was applied on the Apache NiFi 1.6.0 release...
CVE-2018-1310
CVE-2018-1310 affects Apache NiFi via JMS deserialization tied to the ActiveMQ client vulnerability CVE-2015-5254. The issue arises from deserializing untrusted JMS content, enabling denial of service as noted in the associated ActiveMQ advisories. Mitigation in NiFi is to upgrade the activemq-cl...
Microsoft Edge Chakra - Deferred Parsing Makes Wrong Scopes (2)
Microsoft Edge Chakra - Deferred Parsing Makes Wrong Scopes 2 / Since the PoC is only triggerable when the "DeferParse" flag enabled and requires a with statement, I think this is simillar to issue 1310 . PoC: / // Enable the flag using '\n'.repeat0x1000 evalfunction f with function printf; ; ; +...
Virtuozzo Linux Errata and Enhancement Advisory 2017:1310
Upstream security update. Follow RHEA-2017-1310 for details...
CVE-2006-1310
CVE-2006-1310 entry is rejected and not active; no vulnerability is associated.
CVE-2017-6412
CVE-2017-6412 affects Sophos Web Appliance (SWA) versions before 4.3.1.2, with a Session Fixation vulnerability (NSWA-1310) that can lead to session hijacking. Public references indicate exploitation in 4.3.1.1 and the issue being addressed in the SWA 4.3.1.2 release notes. The CVE entry and mult...
CVE-2016-1310
CVE-2016-1310 refers to a Cross-Site Scripting (XSS) vulnerability in Cisco Unity Connection Web Framework affecting version 11.5(0.199) . The issue arises from insufficient input validation, enabling remote attackers to inject arbitrary web script or HTML via a crafted URL. Exploitation is possi...
Oracle: Security Advisory (ELSA-2013-1310)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1310
CVE-2015-1310 describes a SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE). The affected product is SAP ASE, and the vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors (as noted alongside SAP Note 2113333). The public descript...
D-Link WBR-1310 Authentication Bypass Vulnerability
No description provided by source. Exploit Title: D-Link WBR-1310 Authentication Bypass Vulnerability Shodan Dork: Embedded HTTP Server 2.00 Date: 22-Dec-2010 Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dlink.com/products/?pid=474 Version: 2.00 Tested on: WBR-1301, firmware versio...
Apple TV < 6.1.1 Multiple Vulnerabilities
Binary data 8274.prm...
Apple Safari Multiple Memory Corruption Vulnerabilities-02 (Apr 2014) - Mac OS X
Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...
CVE-2014-1310
CVE-2014-1310 affects WebKit as used in Apple Safari before 6.1.3 and in the 7.x line before 7.0.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit. Several connected sources reference this...
Oracle Linux 5 : samba3x (ELSA-2013-1310)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1310 advisory. - resolves: 984807 - CVE-2013-4124: DoS via integer overflow when reading an EA list - Fix CVE-2013-0213 and CVE-2013-0214. Tenable has extracted the...
CVE-2013-1310
CVE-2013-1310 describes a use-after-free vulnerability in Internet Explorer 6 and 7 where remote code execution could be triggered by visiting a crafted webpage that accesses a deleted object. The root cause is a memory-management flaw that can lead to arbitrary code execution in the context of t...
Internet Explorer Layout Use-after-free Code Execution (MS13-037; CVE-2013-1310)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...