166 matches found
Ubuntu: Security Advisory (USN-4033-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM Content Navigator is vulnerable to cross-site scripting.
Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4033 DESCRIPTION: IBM Content Navigator is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...
CVE-2018-4033
CVE-2018-4033 affects MacPaw’s CleanMyMac X (tested with version 4.04). The vulnerability resides in the helper protocol’s moveToTrashItemAtPath function: a nil fourth argument allows any local application to call the function as root, enabling modification/deletion of root-file-system items. Cis...
CVE-2017-4033
CVE-2017-4033 is rejected/not used per the initial description.
Debian DSA-4033-1 : konversation - security update
Joseph Bisch discovered that Konversation, an user friendly Internet Relay Chat IRC client for KDE, could crash when parsing certain IRC color formatting codes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
Oracle: Security Advisory (ELSA-2009-1642)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-4033
Samsung SBeam allows remote attackers to read arbitrary images by leveraging an NFC connection to access the HTTP server on port 15000...
CVE-2015-4033
Samsung SBeam contains a vulnerability in its NFC-based peer-to-peer setup. When an NFC connection is established, an HTTP server on port 15000 can be started, allowing a remote attacker to read/download images from the device. ZDI explicitly notes that the attacker must be within NFC range and t...
OracleVM 2.2 : acpid (OVMSA-2009-0037)
The remote OracleVM system is missing necessary patches to address critical security updates : - Resolves: 515062 CVE-2009-4033 acpid: log file created with random permissions - start acpid before hal - Resolves: 503177 - Updated the License entry - Fixed CVE-2009-0798 too many open files DoS -...
CVE-2014-4033
Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...
CVE-2014-4033
CVE-2014-4033 is an XSS vulnerability in Epignosis eFront 3.6.14.4, identified in libraries/includes/personal/profile.php. It can be triggered via the surname parameter to student.php to inject arbitrary web script/HTML. Red Hat and NVD entries reproduce the same description. Exploitation details...
IBM DB2 10.1 < Fix Pack 3 Multiple Vulnerabilities (credentialed check)
According to its version, the installation of IBM DB2 10.1 on the remote host is affected by the following vulnerabilities : - When a multi-node configuration is used, an error exists in the Fast Communications Manager FCM that could allow denial of service attacks. CVE-2013-4032 / IC94434 - An...
IBM DB2 10.5 < Fix Pack 1 Security Bypass
According to its version, the installation of IBM DB2 10.5 running on the remote host is affected by a security bypass vulnerability. An unspecified error exists that can allow an attacker to gain SELECT, INSERT, UPDATE, or DELETE permissions to database tables. Note that successful exploitation...
IBM Db2 DML Statement Execution Remote Privilege Escalation Vulnerability
IBM Db2 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...
CVE-2013-4033
CVE-2013-4033 affects IBM DB2 and DB2 Connect (versions 9.7 FP8, 9.8 FP5, 10.1 FP2, 10.5 FP1). An authenticated user with EXPLAIN authority can temporarily gain SELECT/INSERT/UPDATE/DELETE on a table without DATAACCESS authority, by exploiting EXPLAIN-related privileges. IBM security notices list...
Oracle Linux 5 : acpid (ELSA-2009-1642)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1642 advisory. 1.0.4-9.el54.1 - Resolves: 515062 CVE-2009-4033 acpid: log file created with random permissions Tenable has extracted the preceding description block directly...
Oracle Linux 3 : xpdf (ELSA-2007-1030)
From Red Hat Security Advisory 2007:1030 : Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for...
Scientific Linux Security Update : acpid on SL5.x i386/x86_64
CVE-2009-4033 acpid: log file created with random permissions It was discovered that acpid could create its log file '/var/log/acpid' with random permissions on some systems. A local attacker could use this flaw to escalate their privileges if the log file was created as world-writable and with t...