83 matches found
CVE-2023-4042 Ghostscript: incomplete fix for cve-2020-16305
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8...
CVE-2023-4042 Ghostscript: incomplete fix for cve-2020-16305
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8...
CVE-2023-4042
Ghostscript is the affected component. CVE-2023-4042 denotes an incomplete fix for CVE-2020-16305 in Ghostscript as shipped with Red Hat Enterprise Linux 8, with Red Hat advisories noting the fix was not included as claimed. Published connections from AlmaLinux and Amazon Linux advisories frame C...
CVE-2023-4042
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8...
CVE-2022-4042
creationtimestamp| type| source ---|---|--- 2022-12-26 16:40:41+00:00| seen| https://t.me/cibsecurity/55345 2025-04-11 23:51:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11513...
CVE-2022-4042
CVE-2022-4042 affects the Paytium: Mollie payment forms & donations WordPress plugin (versions before 4.3.7). The issue is due to inadequate sanitisation/escaping of certain plugin settings, enabling Stored XSS by high-privilege users (e.g., admins) and potentially in multisite setups where unfil...
CVE-2022-4042 Paytium < 4.3.7 - Admin+ Stored XSS
The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...
Security Bulletin: Vulnerabilities in IBM SPSS Collaboration and Deployment Services (CVE-2013-5370 & CVE-2013-4042)
Abstract Vulnerabilities have been identified in IBM SPSS Collaboration and Deployment Services which make the product vulnerable to remote code execution. Content VULNERABILITY DETAILS: CVEID:CVE-2013-4042 DESCRIPTION: All users of Collaboration and Deployment Services are vulnerable. CVSS Base...
CVE-2021-4042
The CVE-2021-4042 entry is rejected/not used per the initial description.
CVE-2019-4042
IBM Sterling B2B Integrator is affected by CVE-2019-4042 through a permission-control vulnerability that could allow a user without proper permissions to access EBICS configuration using their own secure token. Affected versions are IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0. Remediation...
AlmaLinux 8 : flatpak (ALSA-2021:4042)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4042 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with...
RHEL 8 : flatpak (RHSA-2021:4042)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4042 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Sandbox bypass via rece...
Oracle Linux 8 : flatpak (ELSA-2021-4042)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4042 advisory. 1.8.5-4 - Fix CVE-2021-41133 2012867 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...
SUSE: Security Advisory (SUSE-SU-2015:1637-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4042
Bareos before version 19.2.8 is vulnerable to an authentication bypass where a malicious client can replay the director’s cram-md5 challenge to the director itself, causing the director to treat the replay as a valid response to its original challenge. The issue arises when the director allows cl...
CVE-2020-4042 Authentication bypass in Bareos
Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director without knowledge of the shared secret if the director allows client initiated connection and connects to the client itself. The malicious client can replay the Bareos director's cram-md5 challenge...
EulerOS 2.0 SP2 : coreutils (EulerOS-SA-2020-1663)
According to the versions of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering...
Huawei EulerOS: Security Advisory for coreutils (EulerOS-SA-2020-1663)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for coreutils (EulerOS-SA-2020-1374)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...