Privilege escalation

An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID...

CVE-2020-1365

Technical details about CVE-2020-1365 are not publicly provided in the connected documents. The Windows Event Logging Service elevation-of-privilege vulnerability lacks product/version/impact/fix specifics here. Monitor sources for updates and confirmed technical details.

Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2018-1365)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : freerdp (ALAS-2019-1365)

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...

Microsoft Windows Multiple Vulnerabilities (KB4519976)

This host is missing a critical security update according to Microsoft KB4519976 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows IIS Server CVE-2019-1365 Remote Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks may cause denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-b...

Security Bulletin: IBM Cloud Event Management is affected by a security vulnerability when using Microsoft Internet Explorer (CVE-2018-1365)

Summary IBM Cloud Event Management is affected by one or more security vulnerabilities. When using Internet Explorer, Cloud Event Management can be loaded in to an iframe that is not part of the Cloud Event Management system. If you do not load Cloud Event Management directly, your session might ...

CVE-2017-1365

IBM Team Concert (RTC) and IBM Rational CLM are affected by a cross-site scripting vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The CVE entry covers IBM Rational CLM/RRC components including CL...

CentOS Update for nss CESA-2017:1365 centos7

Check the version of nss SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882730";...

Oracle Linux 7 : nss (ELSA-2017-1365)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1365 advisory. 3.28.4-1.2.0.1 - Added nss-vendor.patch to change vendor 3.28.4-1.2 - Include CKBI 2.14 and updated CA constraints from NSS 3.28.5 3.28.4-1.1 - Fix zero-length...

Virtuozzo Linux Errata and Security Advisory 2017:1365 Important

Upstream security update. Follow RHSA-2017-1365 for details...

CVE-2016-1365

CVE-2016-1365 affects Cisco APIC-EM (Grapevine update process) and allows an authenticated remote attacker to execute arbitrary commands as root via a crafted upgrade parameter. The root cause is insufficient input sanitization during the Grapevine update process. Impact is remote code execution ...

IBM Tivoli Storage Manager FastBack Server Opcode 1365 Volumes Restore Agents Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1365. By sending a crafted packet on TCP...

IBM Tivoli Storage Manager FastBack Server Opcode 1365 Files Restore Agents Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1365. By sending a crafted packet on TCP...

CVE-2015-1365

CVE-2015-1365 affects the WordPress Pixabay Images plugin (Pixabay Images) with a directory traversal flaw in pixabay-images.php. The vulnerability (present in versions before 2.4) allows remote attackers to write arbitrary files by supplying a …/ sequence in the q parameter, enabling potential c...

APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5 Safari 6.1.5 and Safari 7.0.5 are now available and address the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.3 Impact...

Apple TV < 6.1.2 Multiple Vulnerabilities

Binary data 8323.prm...

CVE-2014-1365

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

UBUNTU-CVE-2014-1365

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1365

CVE-2014-1365 affects WebKit as used in Apple iOS before 7.1.2, Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) through a crafted websit...