CVE-2022-4066 davidmoreno onion Log response.c onion_response_flush allocation of resources

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onionresponseflush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is...

CVE-2022-4066

CVE-2022-4066 affects the davidmoreno onion project. The vulnerability is in onion_response_flush (src/onion/response.c) within the Log Handler, where manipulation leads to resource allocation. A patch identified as de8ea938342b36c28024fd8393ebc27b8442a161 is available; applying the patch is reco...

Security Bulletin: Multiple security vulnerabilities exist in IBM InfoSphere Information Server (CVE-2013-4066 and CVE-2013-4067)

Abstract Security Bulletin: Multiple security vulnerabilities exist in IBM InfoSphere Information Server CVE-2013-4066 and CVE-2013-4067 Content Security vulnerabilities exist in various versions of IBM Information Server or constituent products. See the individual descriptions for details...

OPENSUSE-SU-2021:1632-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 96.0.4664.110 boo1193713: CVE-2021-4098: Insufficient data validation in Mojo CVE-2021-4099: Use after free in Swiftshader CVE-2021-4100: Object lifecycle issue in ANGLE CVE-2021-4101: Heap buffer overflow in Swiftshader CVE-2021-4102:...

CVE-2021-4066

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-4066

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-4066

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-4066

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-4066

CVE-2021-4066 is an integer underflow in the ANGLE component of the Chromium browser engine, present before version 96.0.4664.93. The vulnerability could allow a remote attacker to cause heap corruption through crafted HTML/web content, potentially enabling arbitrary code execution. Concrete refe...

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1582-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1582-1 advisory. - Use after free in loader. CVE-2021-38005 - Use after free in storage foundation. CVE-2021-38006, CVE-2021-38011 - Type Confusion in V8...

SUSE: Security Advisory (SUSE-SU-2021:4066-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Chromium: CVE-2021-4066 Integer underflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2020-4066

Limdu prior to version 0.95 contains a command injection vulnerability in the trainBatch function. This affects users of Limdu’ s Node.js machine learning framework that rely on shell-executed components (e.g., SVM-related tools). The issue can enable an attacker to execute arbitrary OS commands ...

CVE-2020-4066 Command Injection in Limdu trainBatch function

In Limdu before 0.95, the trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This has been patched in 0.95...

Sql injection

The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066...

Ubuntu 16.04 LTS / 18.04 LTS : libmspack vulnerability (USN-4066-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4066-1 advisory. It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly use this issue to access sensitive informatio...

CVE-2019-4066

IBM IOC CVE-2019-4066 affects IBM Intelligent Operations Center (IOC) 5.1.0–5.2.0; IOC for Emergency Management 5.1.0–5.1.0.6; and Water Operations for Waternamics 5.1.0–5.2.1.1. An authenticated user can create arbitrary user accounts, causing ID-management issues and potentially enabling code e...

Security Bulletin: IBM® Intelligent Operations Center has a weak user-creation policy (CVE-2019-4066)

Summary An authenticated user can create users with malformed user IDs in IBM® Intelligent Operations Center so that these new users cannot be deleted later from the system. Because the malformed users cannot be deleted at the application level, this is a denial of service issue. Vulnerability...

CVE-2018-4066

An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an authenticated user to perform privileged requests unknowingly, resulting in unauthenticated requests being...

CVE-2018-4066

Sierra Wireless AirLink ES450 FW 4.9.3 exposes a CSRF vulnerability in ACEManager (CVE-2018-4066) that can force an authenticated user to perform privileged actions, effectively triggering authenticated-page requests on behalf of the user. The issue is documented across TI sources (Talos TALOS-20...