13816 matches found
Amazon Linux AMI : vim (ALAS-2019-1239)
It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution. CVE-2019-12735 C Tenable Network Security, Inc. The descriptive text and package checks in...
CVE-2019-14266
OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php...
CVE-2019-2832
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes...
CVE-2019-2832
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes...
Design/Logic Flaw
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes...
CVE-2019-2832
CVE-2019-2832 affects Oracle Solaris 10, specifically the Common Desktop Environment subcomponent. The vulnerability is documented as a local, user-privilege–level issue that could allow a low-privilege attacker with logon to compromise Solaris, with potential takeover of the affected host. The C...
CVE-2019-2832
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes...
The vulnerability of the Microsoft Common Object Runtime Library on the Microsoft .NET Framework software platform allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft Common Object Runtime Library in the Microsoft .NET Framework is related to errors in handling web requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests...
CVE-2018-2024
creationtimestamp| type| source ---|---|--- 2019-07-22 18:28:14+00:00| seen| https://t.me/cibsecurity/5634...
jackson-databind: improper polymorphic deserialization in jboss-common-core class
A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the jboss-common-core class. An attacker could use this flaw to execute arbitrary code...
jackson-databind: improper polymorphic deserialization in jboss-common-core class
A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the jboss-common-core class. An attacker could use this flaw to execute arbitrary code...
Oracle Siebel CRM Siebel Core - Common Components Component Access Control Error Vulnerability
Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions. The solution includes sales management, marketing management, customer service systems, call center modules.Siebel Core - Common Components is one of the Siebel Common Components. A...
Oracle Solaris Component Access Control Error Vulnerability
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Common Desktop Environment subcomponent of the Solaris component version 10 of the Oracle Sun...
CentOS Update for vim-common CESA-2019:1774 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
jackson-databind: improper polymorphic deserialization in jboss-common-core class
A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the jboss-common-core class. An attacker could use this flaw to execute arbitrary code...
Solaris 10 (x86) : 153061-01
Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to...
jackson-databind: improper polymorphic deserialization in jboss-common-core class
A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the jboss-common-core class. An attacker could use this flaw to execute arbitrary code...
CVE-2019-1083
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'...