74 matches found
Node.js -- September 2020 Security Releases
Node.js reports: Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues. HTTP Request Smuggling due to CR-to-Hyphen conversion High CVE-2020-8201 Affected Node.js versions converted carriage returns in HTTP request headers to a hyphen before parsing...
CVE-2019-8252
creationtimestamp| type| source ---|---|--- 2020-07-06 22:55:21+00:00| seen| https://t.me/cibsecurity/13261...
CVE-2019-8252
CVE-2019-8252 is a type confusion vulnerability in Adobe Acrobat/Reader. The public descriptions indicate affected products/versions include Adobe Acrobat/Reader on Windows and macOS, with targets such as 2015.006.30497/30498 and older, 2017.011.30142/30143 and older, and 2019.012.20035 and earli...
CVE-2017-8252
creationtimestamp| type| source ---|---|--- 2019-06-14 20:30:34+00:00| seen| https://t.me/cibsecurity/4927...
CVE-2017-8252
CVE-2017-8252 describes a kernel-level information-disclosure vulnerability in TrustZone across Qualcomm/Snapdragon platforms (e.g., IPQ4019, QCS605, SD families). The root cause is the ability for an attacker to induce faults in TrustZone computations, leading to leakage of sensitive data from m...
CVE-2018-8252
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...
CVE-2018-8252
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...
CVE-2018-8254
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint...
CVE-2018-8252
CVE-2018-8252 affects Microsoft SharePoint Server. The connected documents describe an elevation-of-privilege flaw caused by the server not properly sanitizing or filtering specially crafted web requests, allowing a remote attacker to gain elevated privileges. The vulnerability is associated with...
Security Updates for Microsoft Sharepoint Server (June 2018)
The Microsoft Sharepoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an...
CVE-2016-8252
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-8252
The CVE-2015-8252 issue affects RSI Video Technologies Videofied Frontel protocol (pre-3). The vulnerability stems from a pre-shared key that is entirely derived from the device serial number, which is transmitted in clear text. An attacker can sniff the network, recover the device serial number,...
