SUSE CVE-2007-0005

Multiple buffer overflows in the 1 read and 2 write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges...

SUSE CVE-2010-4040

Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted image...

多款Kyocera产品跨站脚本漏洞

The Kyocera ECOSYS Series and Kyocera FS Series are both a series of printers from Kyocera Japan. A security vulnerability exists in the Kyocera MFP 4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN versions, which can be exploited by an attacker to inject arbitrary scripts...

Ubuntu: Security Advisory (USN-4040-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1 <=1.0.5), br.com.faroltech:mssc-brewery-bom (>=1.0.3 <=1.0.5) +405 more potentially affected by CVE-2021-4040 via org.apache.activemq:artemis-core-client (>=1.0.0 <=2.19.0)

org.apache.activemq:artemis-core-client MAVEN version =1.0.0, =1.0.1, =1.0.3, =5.0.9, =1.0.3, =1.6, =1.1, =1.0.3, =1.0.0, =1.0.12, =1.0.0, =1.0.0, =2019.9.14, =2019.9.14, =2021.11.24 and more Source cves: CVE-2021-4040 Source advisory: OSV:GHSA-GF8C-J759-86MG...

CVE-2021-4040

creationtimestamp| type| source ---|---|--- 2022-08-24 20:23:03+00:00| seen| https://t.me/cibsecurity/48668...

CVE-2021-4040

CVE-2021-4040 affects AMQ Broker / Red Hat AMQ Broker where a malformed message can trigger an Out-of-Memory condition, partially disrupting availability. The issue is cited in multiple sources (e.g., GHSA advisory and RHSA-2022:5101) describing a partial DoS via OOM without full compromise. Red ...

Important: Red Hat Security Advisory: Red Hat AMQ Broker 7.10.0 release and security update

Red Hat AMQ Broker 7.10.0 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Advisory ROSA-SA-2021-1809

Software: bolt 0.7 OS: Cobalt 7.9 CVE-ID: CVE-2015-7309 CVE-Crit: HIGH CVE-DESC: The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, allowing remote authenticated users to execute arbitrary code by renaming a created file and then directly accessing it...

SUSE: Security Advisory (SUSE-SU-2014:1211-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:0232-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : libexif (RHSA-2020:4040)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4040 advisory. - In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media conten...

Oracle Linux 7 : libexif (ELSA-2020-4040)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4040 advisory. 0.6.22-1 - Upgrade to 0.6.22 - Resolves: 1841316 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

RHEL 7 : libexif (RHSA-2020:4040)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4040 advisory. The libexif packages provide a library for extracting extra information from image files. The following packages have been upgraded to a lat...

CVE-2020-4040

Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Unauthorized users could generate previews intended for admins, editors, or similar roles. This was fixed in Bolt 3.7.1; affected versions are prior to that release.

CVE-2020-4040 CSRF issue on preview pages in Bolt CMS

Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of proper CSRF protection, unauthorized...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists as a flaw in the Omnikey CardMan 4040 driver that allowed a local user to execute arbitrary code with kernel privileges. In order to exploit this issue, the Omnikey CardMan 4040 PCMCIA card must be present and the local us...

Security Bulletin: IBM Navigator for i is affected by CVE-2019-4040

Summary IBM Navigator for i is supported by IBM i. IBM i has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4040 DESCRIPTION: IBM Navigator for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

Ubuntu: Security Advisory (USN-4040-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : Expat vulnerability (USN-4040-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4040-1 advisory. It was discovered that Expat incorrectly handled certain XML files. An attacker could possibly use this issue to cause a denial of service. Tenable ha...