CVE-2021-4039

CVE-2021-4039 affects Zyxel NWA-1100-NH. The web interface contains a command injection flaw that could allow an attacker to execute arbitrary OS commands on the device via network access without user interaction. This is a high-severity issue (CVSS v3.1: 9.8, Network, Low exploitability, no user...

SUSE SLES12: kernel-livepatch-4_12_14-197_102-default / etc (SUSE-SU-2021:4039-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:4039-1 advisory. This update for the Linux Kernel 4.12.14-122103 fixes one issue. The following security issue was fixed: - CVE-2021-0935: In ip6xmit of...

SUSE: Security Advisory (SUSE-SU-2014:0928-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4039

SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient input validation. Any admin config and file readable by the app can be retrieved by the attacker. Furthermore, some files can also be moved o...

CVE-2020-4039 Directory Traversal Vulnerability in SUSI.AI Server

SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient input validation. Any admin config and file readable by the app can be retrieved by the attacker. Furthermore, some files can also be moved o...

CentOS 7 : OpenEXR (RHSA-2020:4039)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4039 advisory. - An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refi...

Oracle Linux 7 : OpenEXR (ELSA-2020-4039)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4039 advisory. - fix CVE-2020-11764 1833552 - fix CVE-2020-11763 1833566 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RHEL 7 : OpenEXR (RHSA-2020:4039)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4039 advisory. OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. This...

CVE-2015-4039

The CVE-2015-4039 entry corresponds to the WordPress WP Membership plugin version 1.2.3, which contains stored XSS vulnerabilities. According to the sources, remote authenticated users can inject arbitrary script or HTML via (1) profile fields or (2) new post content. An additional note indicates...

CVE-2019-4039

CVE-2019-4039 affects IBM WebSphere MQ: 8.0.0.0–8.0.0.9 and 9.0.0.0–9.1.1. The issue allows a local attacker to cause a denial of service within the error log reporting system. Root cause is tied to the error logging function; no exploit details are provided in the documents. The vulnerability is...

Privilege Escalation

The ppc64-diag packages provide diagnostic tools for Linux on the 64-bit PowerPC platforms. The platform diagnostics write events reported by the firmware to the service log, provide automated responses to urgent events, and notify system administrators or connected service frameworks about the...

CVE-2018-4039

An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can allow an attacker to corrupt memory, which can result in code execution under the context of the application. An attacker must convince a victim to open a...

CVE-2018-4039

CVE-2018-4039 is a concrete vulnerability in Atlantis Word Processor 3.2.7.2 where the PNG image handling allows an out-of-bounds write during PNG decoding (inflate_table writes beyond a 64-byte buffer if code lengths exceed 15). This memory corruption can lead to code execution in the applicatio...

Security Bulletin: PowerKVM is affected by ppc64-diag and powerpc-utils vulnerabilities (Multiple CVEs)

Summary PowerKVM is affected by multiple vulnerabilities in ppc64-diag and powerpc-utils. Vulnerability Details CVEID: CVE-2014-4038 DESCRIPTION: ppc64-diag could allow a local attacker to launch a symlink attack. lpdelatest.sh creates temporary files insecurely. A local attacker could exploit th...

CVE-2017-4039

This CVE entry is rejected/not used as stated in the initial description.

newlook.com XSS vulnerability

Vulnerable URL: http://www.newlook.com/fr/shop/no-results?Ntt=x"-alert/XSSPOSED/-"x=1 Details: Description| Value ---|--- Patched:| Yes, at 21.06.2016 Latest check for patch:| 21.06.2016 04:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4039 Google Pagerank|...

WordPress WP Membership 1.2.3 Cross Site Scripting

Exploit Title: WordPress WP Membership plugin Stored XSS Contact: https://twitter.com/panVagenas Vendor Homepage: http://wpmembership.e-plugins.com/ Software Link: http://codecanyon.net/item/wp-membership/10066554 Version: 1.2.3 Tested on: WordPress 4.2.2 CVE: CVE-2015-4039...

openSUSE: Security Advisory for ppc64-diag (openSUSE-SU-2014:0953-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for ppc64-diag (openSUSE-SU-2014:0953-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ppc64-diag: fix for tmp races and information disclosure (important)

ppc64-diag was updated to fix tmp race issues CVE-2014-4038 and a file disclosure problem in snapshot tarball generation CVE-2014-4039...