125 matches found
CVE-2021-1527
CVE-2021-1527 concerns Cisco Webex Player (Windows/macOS). The issue arises from insufficient validation of values in Webex recording files stored in Webex Recording Format (WRF); a malicious WRF file could be opened from a link or email attachment to cause the player to crash and potentially rev...
CVE-2020-1527 Windows Custom Protocol Engine Elevation of Privilege Vulnerability
...
CVE-2020-1527
CVE-2020-1527 – Windows Custom Protocol Engine Elevation of Privilege Root cause: The vulnerability stems from the Windows Custom Protocol Engine improperly handling memory, enabling an attacker who already has code execution on the victim system to run a crafted application and gain higher privi...
KB4571692: Windows 10 August 2020 Security Update
The remote Windows host is missing security update 4571692. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.2.29 openshift security update
An update for openshift is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2019-1527
CVE-2019-1527 entry is rejected/not used per Initial Description.
Oracle Linux 8 : WALinuxAgent (ELSA-2019-1527)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-1527 advisory. 2.2.32-1.0.1.el80.1 - Add oracle support to fix waagent.service build issue 2.2.32-1.el80.1 - wla-Add-fixes-for-handling-swap-file-and-other-nit-fixes.patch...
RHEL 8 : WALinuxAgent (RHSA-2019:1527)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:1527 advisory. The Windows Azure Linux Agent supports provisioning and running Linux virtual machines in the Microsoft Windows Azure cloud. Security Fixes:...
Security Bulletin: IBM i2 Analyst's Notebook XML Entity Injection Vulnerability
Summary IBM i2 Analyst's Notebook Premium version 9.0.8 has addresses the XML Entity Injection vulnerability detailed in CVE-2018-1527. When using any of the import features on IBM i2 Analyst's Notebook Premium, Cellebrite, XRY, and Notebook Exchange from the Import menu, it is possible to import...
Security Bulletin: IBM i2 Analyst's Notebook. CVE-2018-1527
Summary IBM i2 Analyst's Notebook version 9.0.8 addresses the XML Entity Injection vulnerability detailed in CVE-2018-1527 Vulnerability Details When using any of the import features on IBM i2 Analyst's Notebook Cellebrite, XRY, and Notebook Exchange from the Import menu it is possible to import...
Security Bulletin: XML External Entity (XXE) injection vulnerability affects IBM Business Process Manager (CVE-2017-1527)
Summary IBM Business Process Manager BPM can process XML messages, including messages from untrusted sources. Because of insufficient restriction of an XML parser, XML External Entity injection allows an authenticated remote attacker to send specially crafted XML messages and thus cause a denial ...
CVE-2017-1527
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156...
CVE-2015-1527
Integer overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via a crafted application, aka Android Bug ID 19261727...
CVE-2015-1527
CVE-2015-1527 is tied to an integer overflow in IAudioPolicyService.cpp in Android, enabling local privilege escalation via a crafted app (Android Bug ID 19261727). Public records consolidate this as a local‑privilege‑escalation flaw in the Android audio policy service. The connected sources refe...
CVE-2009-1527
Race condition in the ptraceattach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACEATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect credexecmutex object...
Novell iPrint Client ActiveX Control call-back-url Buffer Overflow
No description provided by source. $Id: novelliprintcallbackurl.rb 10429 2010-09-21 18:46:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Novell iPrint Client ActiveX Control call-back-url Buffer Overflow Exploit (meta)
No description provided by source. novelliprintcallbackurl.rb Novell iPrint Client ActiveX Control call-back-url Buffer Overflow exploit for the Metasploit Framework Exploit successfully tested on the following platforms: - Novell iPrint Client 5.40 on Internet Explorer 7, Windows XP SP3 - Novell...
Novell iPrint Client Browser Plugin - call-back-url Stack Overflow
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ Title : Novell iPrint Client Browser Plugin call-back-url stack overflow Version : iPrint Client plugin v5.42 XP SP3 Analysis :...
CVE-2014-1527
CVE-2014-1527 affects Mozilla Firefox for Android (Android builds, e.g., Firefox 28.x and earlier; NVD references Firefox before 29.0 on Android). The vulnerability allows remote attackers to spoof the address bar by crafting JavaScript that uses DOM events to prevent reappearance of the real add...