135 matches found
CVE-2019-2231
In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...
CVE-2019-2231
CVE-2019-2231 affects the Android blob handling in Blob::Blob (blob.cpp), where improper input validation can lead to an unencrypted master key and local information disclosure. The issue requires local access with system privileges to exploit, with no user interaction needed. Public sources conf...
Google Android System Component CVE-2019-2231 Local Information Disclosure Vulnerability
Description Google Android is prone to a local information-disclosure vulnerability. An attacker can exploit this issue to obtain potentially sensitive information. This issue is being tracked by Android Bug ID A-141955555. Technologies Affected Google Android 10.0 Google Android 9.0...
CVE-2017-2231
The CVE-2017-2231 issue affects the installer and the self-extracting archive for MLIT DenshiSeikabutsuSakuseiShienKensa system, versions 3.02 and earlier. Root cause: untrusted DLL search path (CWE-427) within the installer/self-extracting package, enabling an attacker to load a Trojan horse DLL...
CVE-2016-2231
The CVE-2016-2231 issue affects Huawei SmartAX MT882 devices (V200R002B022 Arg) where the WHIP service relies on a client-supplied length field that must match the buffer size. A crafted TCP traffic sequence to port 8701 can exploit this mismatch to cause a denial of service (device outage) and p...
Oracle: Security Advisory (ELSA-2015-2231)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : ntp (ELSA-2015-2231)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2231 advisory. - check origin timestamp before accepting KoD RATE packet CVE-2015-7704 - allow only one step larger than panic threshold with -g CVE-2015-5300 -...
Oracle: Security Advisory (ELSA-2008-0297)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for qemu-kvm RHSA-2013:1100-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
synetics i-doit pro API跨站脚本漏洞
BUGTRAQ ID：65957 CVE ID：CVE-2014-2231 Synetics i-doit是德国Synetics公司的一个基于Web的开源IT文档和CMDB（配置管理数据库），它能够记录IT系统及其变化的信息，同时针对系统变化制定应急方案，最终确保IT网络稳定、高效的运作。 synetics i-doit 1.2.5之前版本的的API存在跨站脚本漏洞，允许远程攻击者通过产权注入任意的web脚本或HTML。 0 synetics GmbH i-doit 1.2.4 synetics GmbH i-doit 1.1.1 synetics GmbH i-doit 1.1.2...
CVE-2014-2231
Cross-site scripting XSS vulnerability in the API in synetics i-doit pro before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via a property title...
CVE-2014-2231
Cross-site scripting XSS vulnerability in the API in synetics i-doit pro before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via a property title...
CVE-2014-2231
CVE-2014-2231 affects synetics i-doit pro API prior to 1.2.5, where an XSS flaw allows remote attackers to inject arbitrary web script/HTML via the title property. Affected: synetics i-doit pro before 1.2.5 (API component). Root cause: improper handling/validation of the title field in API input....
CVE-2013-2231
CVE-2013-2231 is an Unquoted Windows search path vulnerability in the QEMU Guest Agent service that affects Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, and related 6.x variants. The issue is exploitable locally via a crafted program placed in an unspecified folder, wi...
CentOS Update for qemu-guest-agent CESA-2013:1100 centos6
Check for the Version of qemu-guest-agent OpenVAS Vulnerability Test CentOS Update for qemu-guest-agent CESA-2013:1100 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...
Updated qemu package fixes CVE-2013-2231
Updated qemu packages fix security vulnerability: An unquoted search path flaw was found in the way the QEMU Guest Agent service installation was performed on Windows. Depending on the permissions of the directories in the unquoted search path, a local, unprivileged user could use this flaw to ha...
CentOS 6 : qemu-kvm (CESA-2013:1100)
Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 6 : qemu-kvm (RHSA-2013:1100)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1100 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component for...
Scientific Linux Security Update : qemu-kvm on SL6.x i386/srpm/x86_64 (20130722)
An unquoted search path flaw was found in the way the QEMU Guest Agent service installation was performed on Windows. Depending on the permissions of the directories in the unquoted search path, a local, unprivileged user could use this flaw to have a binary of their choosing executed with SYSTEM...