CVE-2021-4019

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-4019 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-4019

CVE-2021-4019 affects Vim. The vulnerability is described as a heap-based buffer overflow in Vim, with advisories noting exploitation could crash or potentially enable code execution when processing crafted input files. Public documents indicate vulnerable versions are legacy Vim builds prior to ...

CVE-2021-4019

vim is vulnerable to Heap-based Buffer Overflow...

pfSense 2.4.x < 2.4.4-p1 Multiple Vulnerabilities (SA-18_09)

According to its self-reported version number, the remote pfSense install is a version 2.4.x prior to 2.4.4-p1. It is, therefore, affected by multiple vulnerabilities, including the following: - An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE...

CVE-2020-4019

CVE-2020-4019 affects the Atlassian Companion App prior to version 1.0.0. The issue is an untrusted search path vulnerability that allows a local attacker to cause the app to execute a different executable in place of cmd.exe. This is a local, user-interaction-free vector per the NVD entry, with ...

Untrusted Search Path in Content - Edit Files / Companion - CVE-2020-4019

The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability. h5. Acknowledgements Credit for finding this vulnerability goes to Johannes...

CVE-2014-4019

CVE-2014-4019 affects ZTE ZXV10 W300 routers (firmware W300V1.0.0a_ZRD_LK). The issue is improper access control that allows remote attackers to read the ROM-0 backup file via a direct request, exposing sensitive router configuration/password data. Described in NVD as a network-attackable vulnera...

CVE-2018-4019

creationtimestamp| type| source ---|---|--- 2018-12-06 17:58:41+00:00| seen| MISP/5c096266-ed20-42e5-a389-515d0a021402 2022-01-28 05:51:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/125...

CVE-2018-4019

Netgate pfSense CE 2.4.4-RELEASE is affected by three remote command-injection vulnerabilities in the POST handling of system_advanced_misc.php (powerd_normal_mode, powerd_ac_mode, powerd_battery_mode). An attacker must authenticate to the pfSense web admin interface to exploit these via crafted ...

Netgate pfSense system_advanced_misc.php multiple remote command injection vulnerabilities

Summary Three exploitable command injection vulnerabilities exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send...

CVE-2017-4019

CVE-2017-4019 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

Oracle Linux 6 : microcode_ctl (ELSA-2018-4019) (Spectre)

Description of changes: 1:1.17-25.4.0.2 - Revert: early microcode load to allow updating Broadwell model 79 - Revert: Make sure 'modprobe microcode' is not executed on Broadwell model 79 - Revert: Run dracut upon microcode update - Revert updated Intel 20180108 microcode for CPUIDs: CVE-2017-5715...

Debian: Security Advisory (DSA-4019-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4019

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477...

CVE-2016-4019

Technical details about CVE-2016-4019 are not publicly available in the provided documents; no affected components, root cause, or fixes are specified. Monitor for updates from Zimbra advisories and related references.

Oracle: Security Advisory (ELSA-2010-0109)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

macworld.co.uk XSS vulnerability

Vulnerable URL: http://www.macworld.co.uk/login/?originurl=http://www.macworld.co.uk/\x" Details: Description| Value ---|--- Patched:| Yes, at 29.09.2016 Latest check for patch:| 29.09.2016 19:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4019 Google...

VulnCheck KEV: CVE-2014-4019

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0...

ZTE WXV10 W300 Disclosure / CSRF / Default

Exploit Title: ZTE WXV10 W300 Multiple Vulnerabilities Date: 17-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 Firmware: W300V1.0.0aZRDLK ADSL Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali Linux x8664 Exploit Author: Osanda Malith Jayathissa...