73 matches found
Security Advisory - Invalid Pointer Access Vulnerability in Some Huawei Products
There is an invalid pointer access vulnerability in some products. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot. Vulnerability ID: HWPSIRT-2019-12412 This vulnerability has...
CVE-2019-1877
Cisco Enterprise Chat and Email contains an HTTP API vulnerability in the file-download function due to insufficient authentication, allowing unauthenticated, remote attackers to download files attached in chat sessions. A crafted request to the API can exfiltrate files from other users. Affected...
CVE-2018-1877
IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713...
CVE-2018-1877
CVE-2018-1877 affects IBM Robotic Process Automation with Automation Anywhere (11.0). The vulnerability stems from storing highly sensitive information as unencrypted passwords, making them readable by a local user. Impact is information disclosure of credentials stored by the RPA component. Reme...
RHEL 6 : sssd and ding-libs (RHSA-2018:1877)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1877 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It...
CVE-2017-1877
CVE-2017-1877 entry is rejected/not used and does not represent an active vulnerability.
[SECURITY] [DLA 217-1] xdg-utils security update
The two below CVE issues have recently been fixed in Debian squeeze-lts: CVE-2014-9622 John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a users preferred application, to execute arbitrary commands remotely. CVE-2015-1877 Jiri Horner discovered a way to cause...
DLA-217-1 xdg-utils - security update
Bulletin has no description...
[SECURITY] [DSA 3165-1] xdg-utils security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3165-1] xdg-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3165-1] xdg-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...
CVE-2014-1877
CVE-2014-1877 : Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 2.1.1 allow remote attackers to inject arbitrary web script or HTML via user-supplied input in specific fields: (1) Phone, (2) Street, (3) Address line, (4) Zip code, (5) City (main/auth/profile.php); (6) Subject (main/...
CVE-2013-1877
CVE-2013-1877 is a duplicate of CVE-2013-2616. Connected sources describe the issue as affecting the MiniMagick Gem for Ruby, specifically lib/mini_magick.rb in version 1.3.1, which allows remote attackers to execute arbitrary commands via shell metacharacters in a URL (remote command injection)....
CVE-2012-1877
CVE-2012-1877 is a remote code execution vulnerability in Microsoft Internet Explorer 6–9 caused by improper handling of objects in memory, allowing an attacker to run arbitrary code by accessing a deleted object. Multiple connected sources (including the NVD entry for CVE-2012-1877 and OpenVAS/N...
CVE-2011-1877
CVE-2011-1877 is a Windows kernel‑mode driver use‑after‑free vulnerability in win32k.sys that enables local privilege escalation. The issue arises from incorrect driver object management in the Windows kernel, affecting Windows Vista (SP1/SP2), Windows Server 2008 (Gold, SP2, R2, R2 SP1), and Win...
CVE-2010-1877
SQL injection vulnerability in the JTM Reseller comjtm component 1.9 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter in a search action to index.php...
CVE-2010-1877
SQL injection vulnerability in the JTM Reseller comjtm component 1.9 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter in a search action to index.php...
CVE-2010-1877
The CVE-2010-1877 issue affects Joomla! installations using the JTM Reseller (com_jtm) component 1.9 Beta. The root cause is an SQL injection vulnerability in the author parameter of a search action to index.php, enabling remote attackers to execute arbitrary SQL commands. The connected sources c...