CVE-2020-4061

In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467...

CVE-2020-4061

CVE-2020-4061 affects October CMS’s Froala Rich Editor. Versions 1.0.319 through before 1.0.467 allow self-XSS when pasting content from malicious sites. The issue appears in the clipboard handling of the editor and has been fixed in 1.0.467. Remediation is to upgrade to 1.0.467 or apply the prov...

CVE-2020-4061 Cross-site Scripting in OctoberPotential self-XSS when pasting content from malicious websites

In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467...

procurement.nandicounty.go.ke Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1053505 Security Researcher devl00p Helped patch 2889 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

RHEL 7 : patch (RHSA-2019:4061)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:4061 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes...

Ubuntu 16.04 LTS / 18.04 LTS : Redis vulnerabilities (USN-4061-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4061-1 advisory. It was discovered that Redis incorrectly handled the hyperloglog data structure. An attacker could use this issue to cause Redis to crash,...

Sierra Wireless AirLink Command Injection (CVE-2018-4061)

A command injection vulnerability exists in Sierra Wireless AirLink. An authenticated attacker can send A specially crafted HTTP request to the affected target host and trigger arbitrary command execution...

CVE-2018-4061

CVE-2018-4061 is an exploitable OS command injection in ACEManager iplogging.cgi of Sierra Wireless AirLink ES450 FW 4.9.3. An authenticated HTTP request can inject commands, enabling remote code execution (root) via mis-handling of the -z tcpdump flag in iplogging.cgi. Public advisories (Talos/T...

Multiple Sierra Wireless AirLink Routers Open to Remote Code Execution

Sierra Wireless is warning that additional AirLink router models, which are targeted toward IoT applications, are vulnerable to previously-disclosed critical flaws. The vulnerabilities are part of the 11 critical bugs disclosed on Sierra Wireless’ AirLink ES450 LTE router last week – only now,...

Sierra Wireless AirLink ES450 ACEManager iplogging.cgi Command Injection Exploit

An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can inject arbitrary commands, resulting in arbitrary command execution. An attacker can send an authenticated HTTP reque...

Critical Flaws in Sierra Wireless 5G Gateway Allow RCE, Command Injection

A 5G wireless gateway tailored for industrial internet of things IoT, retail point-of-sale and enterprise redundancy applications is riddled with vulnerabilities, include two critical bugs that allow remote code-execution RCE and arbitrary command-injection. The Sierra Wireless AirLink ES450 LTE...

CVE-2019-4061

creationtimestamp| type| source ---|---|--- 2019-03-20 12:24:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ibmbigfixsitespackagesenum.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:16+00:00| seen...

IBM BigFix Relay Server Sites and Package Enum

This module retrieves masthead, site, and available package information from IBM BigFix Relay Servers. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM BigFix Relay Server Sites and Package...

CVE-2019-4061

CVE-2019-4061 affects IBM BigFix Platform 9.2 and 9.5. The vulnerability arises from relay components not requiring authentication, allowing a remote attacker to query the relay and collect information on updates and fixlets deployed to sites. The impact is information disclosure with no user int...

Oracle Linux 7 : kubernetes (ELSA-2018-4061)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4061 advisory. - Ensure that the runtime mounts RO volumes read-only CVE-2017-1002102 - Update Dashboard version to v1.8.3 CVE-2017-1002102 - Fix nested volume mounts...

CVE-2017-4061

CVE-2017-4061 is rejected and not used, and does not represent an active vulnerability entry.

CVE-2017-4061

...

Debian DSA-4061-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4061. The...

Microsoft SQL Server 2012 11.0.x.x < 11.0.3460.0 Multiple Vulnerabilities (2977325)

Binary data 9704.prm...

CVE-2016-4061

Summary of CVE-2016-4061 : Foxit Reader and PhantomPDF (Windows) prior to version 7.3.4 are affected by a vulnerability that allows remote attackers to cause a denial of service (application crash) via a crafted content stream. The issue is described across multiple feeds as a memory/parse fault ...