139 matches found
CVE-2021-1313
creationtimestamp| type| source ---|---|--- 2021-02-04 20:40:34+00:00| seen| https://t.me/cibsecurity/23100...
CVE-2021-1313
CVE-2021-1313 is a Cisco IOS XR Software Denial of Service vulnerability in the Enf Broker caused by improper resource allocation during processing of ICMP/Telnet packets. An unauthenticated remote attacker can crash the enf_broker process, potentially causing system instability and inability to ...
Vulnerabilities fixed in Cisco IOS XR
Cisco has fixed several vulnerabilities in IOS XR. A unauthenticated malicious person could remotely exploit them to cause a denial-of-service, circumvent bypassing security measures or obtaining system information. The vulnerabilities marked CVE-2021-1288 and CVE-2021-1313 involve a...
Security Bulletin: Apache Derby as used by IBM QRadar SIEM is vulnerable to Improper Input Validation (CVE-2018-1313)
Summary Apache Derby as used by IBM QRadar SIEM is vulnerable to Improper Input Validation. Vulnerability Details CVEID: CVE-2018-1313 DESCRIPTION: Apache Derby could allow a remote attacker to bypass security restrictions, caused by improper validation of network packets received. By sending a...
Microsoft Windows Update Orchestrator Unchecked ScheduleWork Call Exploit
This Metasploit module exploit uses access to the UniversalOrchestrator ScheduleWork API call which does not verify the caller's token before scheduling a job to be run as SYSTEM. You cannot schedule something in a given time, so the payload will execute as system sometime in the next 24 hours...
Microsoft Windows Update Orchestrator Unchecked ScheduleWork Call
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/exploit/exe' require 'msf/core/post/windows/registry'...
CVE-2020-1313
creationtimestamp| type| source ---|---|--- 2020-07-30 10:48:02+00:00| published-proof-of-concept| https://t.me/cKure/1569 2020-09-25 21:17:49+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve20201313systemorchestrator.rb 2024-10-26...
CVE-2020-1313
CVE-2020-1313 is a Windows elevation-of-privilege flaw in the Windows Update Orchestrator Service. The vulnerability stems from improper handling of file operations in the USO/UniversalOrchestrator components, allowing an unprivileged caller to schedule work that can execute with SYSTEM context v...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2017-1313)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : openssh (ALAS-2019-1313)
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle attacker can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This...
Amazon Linux 2 : optipng (ALAS-2019-1313)
The bmpreadrows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service invalid memory write and crash via a series of delta escapes in a crafted BMP image.CVE-2016-2191 C Tenable Network Security, Inc. The descriptive text and package checks i...
CVE-2019-1313
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1376...
CVE-2019-1313
CVE-2019-1313 affects Microsoft SQL Server Management Studio (SSMS). Connected sources describe an information disclosure due to improper enforcement of permissions, enabling potential access to sensitive database/file information. Specifics across documents include affected SSMS versions (e.g., ...
Microsoft SQL Server Management Studio 18.x < 18.3.1 Multiple Vulnerabilities (October 2019)
The version of Microsoft SQL Server Management Studio installed on the remote Windows host is 18.x prior to 18.3.1. It is, therefore, affected by multiple information disclosure vulnerabilities: - An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when i...
Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Derby vulnerability (CVE-2018-1313)
Summary IBM Tivoli Netcool Impact has addressed the following Apache Derby vulnerability. Vulnerability Details CVEID: CVE-2018-1313 DESCRIPTION: Apache Derby could allow a remote attacker to bypass security restrictions, caused by improper validation of network packets received. By sending a...
Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Derby vulnerability (CVE-2018-1313)
Summary IBM Tivoli Netcool Impact has addressed the following Apache Derby vulnerability. Vulnerability Details CVEID: CVE-2018-1313 DESCRIPTION: Apache Derby could allow a remote attacker to bypass security restrictions, caused by improper validation of network packets received. By sending a...
Security Bulletin: A vulnerability in Apache Derby could affect IBM Performance Management products (CVE-2018-1313)
Summary Apache Derby could allow a remote attacker to bypass security restrictions, caused by improper validation of network packets received. By sending a specially-crafted network packet, an attacker could exploit this vulnerability to boot a database whose location and contents are under the...
CVE-2018-1313
In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...
CVE-2018-1313
CVE-2018-1313 affects Apache Derby 10.3.1.4 through 10.14.1.0. A specially crafted Derby Network Server network packet can cause the server to boot a database whose location/contents are under the attacker’s control if Java Security Manager is not enabled; with a permissive default Network Server...
