Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2020-1434)

The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.265.b01-0.54. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1434 advisory. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries...

CVE-2020-1434

CVE-2020-1434: Windows Sync Host Service Elevation of Privilege. CNVD-2020-52919 confirms an in-memory handling flaw in Windows Sync Host Service, enabling a local attacker to execute code with elevated privileges by running a specially crafted application. No exploit details or patch/remediation...

Privilege escalation

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1394, CVE-2019-1395, CVE-2019-1396, CVE-2019-1408, CVE-2019-1434...

CVE-2019-1434

The CVE-2019-1434 entry describes a Windows elevation-of-privilege issue in the Win32k kernel-mode driver caused by improper handling of objects in memory. The vulnerability is local, with a LOW authentication requirement and a HIGH impact on confidentiality, integrity, and availability per CVSS ...

Microsoft Windows Win32k CVE-2019-1434 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems...

CVE-2019-13929

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

CVE-2019-13929

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

CVE-2019-13929

CVE-2019-13929 affects Siemens SIMATIC IT UADM (pre-1.3). A authenticated remote attacker with network access to port 1434/tcp could recover a password enabling read/write access to the related TeamCenter station, without user interaction. The root cause is use of a hard-coded cryptographic key. ...

ICSA-19-281-04 Siemens SIMATIC IT UADM

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC IT Unified Architecture Discrete Manufacturing UADM Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability...

Security Bulletin: IBM® Db2® sensitive information exposure in the error log (CVE-2017-1434).

Summary When a version check to upgrade Db2 to v11.x fails, the connection string is written in the clear in an error message to db2diag.log. Vulnerability Details CVEID: CVE-2017-1434 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server under unusual circumstances, could...

CVE-2018-1434

CVE-2018-1434 affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (versions in 6.1–8.1 range). The vulnerability is a cross-site request forgery (CSRF) that could allow an attacker to perform malicious actions trusted by users’ web interfaces. Aff...

CVE-2014-1434

...

CVE-2014-1434

CVE-2014-1434 is rejected/not used and does not represent an active vulnerability entry.

lg.com XSS vulnerability

Vulnerable URL: http://www.lg.com/common/index.jsp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1434 VIP website status:| Yes Check lg.com SSL connection:| Grade: B- Coordinated...

CVE-2016-1434

CVE-2016-1434 affects Cisco 8800 Series IP Phones running software 11.0(1). The issue is a directory-traversal vulnerability in the license/certificate upload interface, where insufficient input validation allows remote authenticated attackers to delete arbitrary files via an invalid file (Bug ID...

Multiple Vulnerabilities in my little forum

Advisory ID: HTB23248 Product: my little forum Vendor: http://mylittleforum.net/ Vulnerable Versions: 2.3.3 and probably prior Tested Version: 2.3.3 Advisory Publication: January 14, 2015 without technical details Vendor Notification: January 14, 2015 Vendor Patch: February 8, 2015 Public...

CVE-2015-1434

The CVE-2015-1434 entry concerns my little forum, version 2.3.3 (and likely earlier). The advisory documents describe two vulnerable vectors in index.php: (1) SQL Injection via the edit_category parameter and via the letter parameter in admin actions, enabling arbitrary SQL execution; and (2) Cro...

My Little Forum 2.3.3 Cross Site Scripting / SQL Injection Vulnerabilities

My Little Forum version 2.3.3 suffers from cross site scripting and remote SQL injection vulnerabilities. Product: my little forum Vendor: http://mylittleforum.net/ Vulnerable Versions: 2.3.3 and probably prior Tested Version: 2.3.3 Advisory Publication: January 14, 2015 without technical details...

Microsoft SQL Server Resolution Overflow

No description provided by source. $Id: ms02039slammer.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5310/info A vulnerability in Microsoft SQL Server 2000 could allow remote attackers to access target hosts. A problem in the SQL Server Resolution Service allows a remote attacker to execute arbitrary code on a vulnerable...