12 matches found
CVE-2019-16923
kkcms 1.3 has jx.php?url= XSS...
CVE-2017-16923
Command Injection vulnerability in appdatacenter on Shenzhen Tenda Ac9 USAC9V1.0BRV15.03.05.14multiTD01, Ac9 ac9kfV15.03.05.196318cn, Ac15 USAC15V1.0BRV15.03.05.18multiTD01, Ac15 USAC15V1.0BRV15.03.05.19multiTD01, Ac18 USAC18V1.0BRV15.03.05.05multiTD01, and Ac18 ac18kfV15.03.05.196318cn devices...
CVE-2018-16923
CVE-2018-16923 is rejected and does not represent an active vulnerability entry.
CVE-2020-16923
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafte...
CVE-2020-16923 Microsoft Graphics Components Remote Code Execution Vulnerability
...
CVE-2020-16923
CVE-2020-16923 is a remote code execution vulnerability in Microsoft Graphics Components, due to improper handling of objects in memory. An attacker could execute arbitrary code on a target system by convincing a user to open a specially crafted file. Public documents consistently state the issue...
Microsoft Windows Multiple Vulnerabilities (KB4580327)
This host is missing a critical security update according to Microsoft KB4580327 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KB4577668: Windows 10 Version 1809 and Windows Server 2019 October 2020 Security Update
The remote Windows host is missing security update 4577668. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...
KB4580358: Windows 8.1 and Windows Server 2012 R2 October 2020 Security Update
The remote Windows host is missing security update 4580358 or cumulative update 4580347. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability...
CVE-2019-16923
kkcms 1.3 has jx.php?url= XSS...
CVE-2019-16923
CVE-2019-16923 affects kkcms 1.3 and is described as an XSS via the parameter jx.php?url=. The connected Red Hat and NVD records corroborate the same description (kkcms 1.3 has jx.php?url= XSS). Details on affected versions beyond 1.3, exact impact, exploit status, or remediation are not provided...
CVE-2017-16923
The CVE-2017-16923 entry describes a Command Injection vulnerability in the app_data_center component of several Shenzhen Tenda router models (e.g., Ac9, Ac15, Ac18 variants). The underlying issue is that the function sub_A6E8 usbeject_process_entry executes a system function using untrusted inpu...