CVE-2019-1314

CVE-2019-1314 affects Windows 10 Mobile with a local security feature bypass in which Cortana on the lock screen can grant access to files/folders. Public docs indicate exploitation requires physical access and Cortana assistance from the lock screen, enabling potential exposure of the photo libr...

GE ST-1314 RSTi Slice, 4 Points Detection

Binary data 755574.prm...

openSUSE Security Update : ntfs-3g_ntfsprogs (openSUSE-2019-1314)

This update for ntfs-3gntfsprogs fixes the following issues : Security issues fixed : - CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation bsc1130165. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable...

CVE-2018-1314

CVE-2018-1314 affects Apache Hive 2.3.3, 3.1.0 and earlier. The EXPLAIN operation fails to enforce authorization on involved entities, allowing an unauthorized user to run EXPLAIN on arbitrary tables/views and disclose table metadata and statistics. Concrete references include NVD/CVE records and...

CVE-2017-1314

CVE-2017-1314 affects IBM Rational Quality Manager and Rational Collaborative Lifecycle Management versions 5.0–5.0.2 and 6.0–6.0.5. The Web UI is vulnerable to cross-site scripting (XSS) , enabling an attacker to embed arbitrary JavaScript that could lead to credentials disclosure within a trust...

Debian: Security Advisory (DLA-1314-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1314

Upstream security update. Follow RHBA-2017-1314 for details...

CVE-2013-1314

CVE-2013-1314 is rejected/not used per the Initial Description.

CVE-2013-1314

...

Command injection

In Sophos Web Appliance SWA before 4.3.1.2, a section of the machine's configuration utilities for adding and detecting Active Directory servers was vulnerable to remote command injection, aka NSWA-1314...

CVE-2017-6183

In Sophos Web Appliance (SWA) versions prior to 4.3.1.2, CVE-2017-6183 describes a remote command injection vulnerability in the configuration utilities used for adding/detecting Active Directory servers. The issue arises from improper sanitization of input when managing AD-related settings, enab...

CVE-2016-1314

CVE-2016-1314 concerns Cisco Unified Communications Domain Manager (CDM) 8.1(1). A cross-site scripting (XSS) flaw allows an authenticated remote user to inject arbitrary web script or HTML via a crafted URL due to insufficient input validation. Multiple sources (NVD, CNVD, CVE list, Cisco adviso...

CVE-2016-1314

Cross-site scripting XSS vulnerability in Cisco Unified Communications Domain Manager CDM 8.11 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux80760...

CVE-2015-1314

CVE-2015-1314 affects the USAA Mobile Banking app on Android up to version 7.10.1, where the app shows the most recently used screen before login, potentially allowing physically proximate users to view account numbers and balances. Affected component: Android client; root cause: display of pre-l...

CVE-2012-1314

CVE-2012-1314 is a Cisco IOS Software vulnerability affecting the WAAS Express and MACE features. When WAAS Express or MACE is enabled, an unauthenticated, remote attacker can send crafted transit traffic to cause memory leakage or a device reload, resulting in DoS. The issue is documented under ...

Ubuntu Update for python3.1 USN-1314-1

Ubuntu Update for Linux kernel vulnerabilities USN-1314-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13141.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for python3.1 USN-1314-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

Ubuntu 10.04 LTS / 10.10 / 11.04 : python3.1, python3.2 vulnerabilities (USN-1314-1)

Giampaolo Rodola discovered that the smtpd module in Python 3 did not properly handle certain error conditions. A remote attacker could exploit this to cause a denial of service via daemon outage. This issue only affected Ubuntu 10.04 LTS. CVE-2010-3493 Niels Heinen discovered that the urllib...

Zend Server Java Bridge Arbitrary Java Code Execution

Zend Server Java Bridge, a service that lets PHP applications use Java code, has an arbitrary code execution vulnerability. The service accepts requests to execute Java code without authentication. A remote, unauthenticated attacker could exploit this to execute arbitrary Java code. C Tenable...

CVE-2011-1314

The CVE concerns IBM WebSphere Application Server (WAS) — specifically the Service Integration Bus (SIB) messaging engine — and affects WAS versions prior to 7.0.0.15. An attacker can remotely cause a denial-of-service (daemon hang) by performing close operations over network connections to a que...

CVE-2010-1314

Joomla! component Highslide JS com_hsconfig (versions 1.5 and 2.0.9) contains a Local File Inclusion via the controller parameter to index.php, enabling a directory traversal (..). This allows reading arbitrary server files. The NUCLEI template confirms the vulnerability and notes remediation as ...