166 matches found
RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.13 security update on RHEL 8 (Important) (RHSA-2023:5485)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5485 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.13 security update on RHEL 7
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.13 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2023-4061
A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system...
CVE-2022-4061
creationtimestamp| type| source ---|---|--- 2022-12-19 16:10:37+00:00| seen| https://t.me/cibsecurity/54863 2023-09-17 19:01:38+00:00| published-proof-of-concept| https://t.me/v3n0mhack/281...
CVE-2022-4061
The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP...
CVE-2022-4061 JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP...
CVE-2022-4061
The CVE concerns the JobBoardWP WordPress plugin prior to version 1.2.2, where the file upload feature fails to validate file names and types. This allows unauthenticated attackers to upload arbitrary files (including PHP). Affected software: JobBoardWP plugin for WordPress; vulnerable component:...
CVE-2022-4061 JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP...
OPENSUSE-SU-2021:1632-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 96.0.4664.110 boo1193713: CVE-2021-4098: Insufficient data validation in Mojo CVE-2021-4099: Use after free in Swiftshader CVE-2021-4100: Object lifecycle issue in ANGLE CVE-2021-4101: Heap buffer overflow in Swiftshader CVE-2021-4102:...
CVE-2021-4061
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2021-4061
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4061
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4061
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4061
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4061
CVE-2021-4061 describes a type confusion in V8 within Chromium/Google Chrome prior to 96.0.4664.93, enabling a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability affects Chromium-based browsers and is tracked in multiple advisories; upgrade to versio...
CVE-2021-4061
creationtimestamp| type| source ---|---|--- 2021-12-22 10:04:53+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1556 2021-12-22 11:12:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5031...
openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1582-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1582-1 advisory. - Use after free in loader. CVE-2021-38005 - Use after free in storage foundation. CVE-2021-38006, CVE-2021-38011 - Type Confusion in V8...
Chromium: CVE-2021-4061 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2020-4061
In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467...