CVE-2021-1362 Cisco Unified Communications Products Remote Code Execution Vulnerability

A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, and Cisco Prime License Manager could allow an authenticated, remo...

CVE-2021-1362

CVE-2021-1362 affects Cisco Unified Communications Manager family (CUCM, IM&P, Session Management Edition, Unity Connection, Prime License Manager). The vulnerability is due to improper sanitization of user-supplied input in the SOAP API endpoint, allowing an authenticated, remote attacker to sen...

CVE-2020-1362

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1369...

Privilege escalation

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1362, CVE-2020-1369...

Privilege escalation

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1362...

CVE-2020-1362

CVE-2020-1362 affects the Windows WalletService, an elevation-of-privilege vulnerability caused by how WalletService handles objects in memory. Multiple connected sources (CNVD entries) confirm the root cause is improper in‑memory handling leading to privilege escalation. No specific exploit vect...

Amazon Linux AMI : libtirpc (ALAS-2020-1362)

The version of libtirpc installed on the remote host is prior to 0.2.4-0.16.15. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1362 advisory. A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefdxprt was n...

kronemag.eu Cross Site Scripting vulnerability

Security Researcher 4NCURZE Helped patch 1362 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting kronemag.eu website and its users. Following coordinated a...

texasmarine.com Cross Site Scripting vulnerability

Security Researcher 4NCURZE Helped patch 1362 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting texasmarine.com website and its users. Following coordinat...

Huawei EulerOS: Security Advisory for libssh2 (EulerOS-SA-2019-1362)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

eberspaecher.com Cross Site Scripting vulnerability

Security Researcher 4NCURZE Helped patch 1362 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting eberspaecher.com website and its users. Following...

CVE-2019-1362

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1364...

CVE-2019-1362

CVE-2019-1362 is an elevation of privilege vulnerability in Windows caused by improper handling of objects in memory within the kernel-mode driver win32k. The CVE entry distinguishes this issue from CVE-2019-1364. CVSS data from NVD indicates a high-severity, local-attack-vector issue with a comb...

Microsoft Windows Multiple Vulnerabilities (KB4519976)

This host is missing a critical security update according to Microsoft KB4519976 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Win32k Elevation of Privilege (CVE-2019-1362)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Win32k CVE-2019-1362 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Syste...

KLA11872 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...

Security Bulletin: Fix available for Insecure Direct Object Reference in IBM Cúram Social Program Management (CVE-2018-1362)

Summary IBM Cúram Social Program Management Universal Access is vulnerable to Insecure Direct Object Reference. An authenticated user may have the ability to withdraw another user's submitted applications from the system and possibly obtain privileges. Vulnerability Details CVEID: CVE-2018-1362...

Security Bulletin: Security Identity Adapter data traffic to/from server is not encrypted by default

Summary Security Identity Adapter data traffic to/from IGI and ISIM server is not encrypted by default. Adapter installers have been updated to enable SSL by default. The customer can choose during installation to disable SSL. Note that keeping the SSL enablement option requires certificates to b...

CVE-2018-1362

IBM Cúram Social Program Management (Citizen Portal) is affected by CVE-2018-1362. Affected versions: 7.0.0.0–7.0.1.1, 6.2.0.0–6.2.0.6, 6.1.0.0–6.1.1.6, and 6.0.5.0–6.0.5.10. The vulnerability is an Insecure Direct Object Reference that could let an authenticated user withdraw another user’s subm...