64 matches found
Amazon Linux AMI : poppler (ALAS-2020-1450)
The version of poppler installed on the remote host is prior to 0.26.5-43.22. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1450 advisory. A divide-by-zero error was found in the way Poppler handled certain PDF files. A remote attacker could exploit this flaw by...
CVE-2020-1450
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456...
CVE-2020-1450
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456...
CVE-2020-1450
CVE-2020-1450 is an XSS vulnerability affecting Microsoft SharePoint Server. The issue arises from improper sanitization of crafted web requests to the SharePoint server, enabling script execution in the user's context. Documented references (CNVD entries and Nessus plugin notes) corroborate Cros...
Description of the security update for SharePoint Enterprise Server 2013: July 14, 2020
None None...
CVE-2019-1450
CVE-2019-1450 is a rejected/not used entry and does not represent an active vulnerability.
Debian: Security Advisory (DLA-1450-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-1450
CVE-2018-1450 affects IBM Db2 on Linux, UNIX and Windows (including DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1. The issue allows a local unprivileged user to overwrite arbitrary files owned by the Db2 instance owner, typically via a symlink attack. Root cause: file overwrite vulnerability in D...
CVE-2017-1450
CVE-2017-1450 affects IBM Emptoris Sourcing 9.5.x through 10.1.3, introducing an open-redirect vulnerability that could enable phishing by redirecting victims to a malicious site and spoofing the URL. The connected IBM security bulletin specifies the vulnerable range and provides remediation via ...
CVE-2016-1450
Cisco WebEx Meetings Server 2.6 is affected by a remote authenticated command-injection vulnerability tied to file-type handling during uploads (CVE-2016-1450, Bug ID CSCuy92715). The issue allows an authenticated attacker to craft upload content that leads to arbitrary command execution on the s...
Oracle Linux 4 : python (ELSA-2011-0260)
From Red Hat Security Advisory 2011:0260 : Updated python packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS ba...
Microsoft Internet Explorer 信息泄露漏洞(CVE-2013-1450)
Bugtraq ID:57640 CVE ID: CVE-2013-1450 Microsoft Internet Explorer是一款流行的WEB浏览器。 在Microsoft Internet Explorer代理服务设置中，如果HTTP和Secure栏中具有相同代理地址和端口，I没有正确重用TCP会话，通过构建特制HTML文档，触发多个HTTPS请求，然后触发一个对该主机的HTTP请求，可获得特定主机的敏感信息。 0 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 厂商解决方案 目前没有详细解决方案提供：...
Design/Logic Flaw
Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted...
CVE-2013-1450
Affected software: Microsoft Internet Explorer 8 and 9. Issue: When the Proxy Settings have the same address/port in HTTP and Secure rows, IE does not properly reuse TCP sessions to the proxy, allowing a remote attacker to obtain sensitive information (e.g., a Cookie header) via a crafted HTML do...
Scientific Linux Security Update : python on SL4.x i386/x86_64
Multiple flaws were found in the Python rgbimg module. If an application written in Python was using the rgbimg module and loaded a specially crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the applicatio...
Ubuntu: Security Advisory (USN-1450-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : net-snmp vulnerability (USN-1450-1)
It was discovered that Net-SNMP incorrectly performed entry lookups in the extension table. A remote attacker could send a specially crafted request and cause the SNMP server to crash, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block...
CVE-2012-1450
The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved3 field. NOTE: this may later be SPLIT into multiple CVEs if...