77 matches found
Huawei EulerOS: Security Advisory for mod_security (EulerOS-SA-2022-1332)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1332
creationtimestamp| type| source ---|---|--- 2021-02-04 20:34:28+00:00| seen| https://t.me/cibsecurity/23078...
CVE-2021-1332
Cisco Small Business RV Series routers (RV016, RV042, RV042G, RV082, RV320, RV325) expose multiple vulnerabilities in their web-based management interface due to improper validation of user-supplied input. An authenticated administrator could craft HTTP requests to the device to achieve arbitrary...
CVE-2020-1332
creationtimestamp| type| source ---|---|--- 2021-01-08 18:41:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2199...
Samba Buffer Overflow Vulnerability (CVE-2003-1332)
Samba is prone to a buffer overflow vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-1332
CVE-2020-1332 is a Microsoft Excel remote code execution vulnerability. It arises when Excel fails to correctly handle objects in memory, allowing an attacker to run arbitrary code in the context of the user. If the user has administrative rights, the attacker could take full control of the affec...
Security Updates for Microsoft Office Products (September 2020)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the...
openSUSE Security Update : freerdp (openSUSE-2020-1332)
This update for freerdp fixes the following issues : - CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel bsc1174321. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package...
KB4535706 - Description of the security update for SQL Server 2016 SP2 CU11: February 11, 2020
KB4535706 - Description of the security update for SQL Server 2016 SP2 CU11: February 11, 2020 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploits this vulnerability could...
CVE-2019-1332
CVE-2019-1332 is an XSS in Microsoft SQL Server Reporting Services (SSRS) caused by inadequate sanitization of crafted web requests. Affected product: SSRS within SQL Server deployments. Impact per documentation: cross-site scripting could enable script execution in the context of the SSRS user. ...
CVE-2018-1332
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons...
CVE-2018-1332
Summary: CVE-2018-1332 affects Apache Storm up to v1.0.6, v1.2.1, and v1.1.2 (and earlier), enabling user impersonation when communicating with certain Storm Daemons. The connected sources reiterate that the vulnerability allows impersonation but do not provide a concrete fix, patch version, or m...
CVE-2017-1332
CVE-2017-1332 affects IBM iNotes 8.5 and 9.0, where a cross-site scripting flaw in the Web UI can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Public data shows CVSS scores (NVD) of 6.1 (CVSS3.0) and 4.3 (CVSS2.0); explo...
CVE-2015-1332
The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted website...
CVE-2015-1332
The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted website...
CVE-2015-1332
CVE-2015-1332 describes a heap corruption in oxide::JavaScriptDialogManager within oxide-qt. Affected: Ubuntu 15.04 and 14.04 packaged oxide-qt core library. Impact per advisories: denial of service via renderer crash and potential arbitrary code execution when visiting a crafted website. Remedia...
CVE-2014-1332
CVE-2014-1332 is rejected and does not represent an active vulnerability entry.
[USN-2735-1] Oxide vulnerabilities
========================================================================== Ubuntu Security Notice USN-2735-1 September 08, 2015 oxide-qt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...
CVE-2015-1332
The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted website...