RHEL 8 : OpenShift Container Platform 4.2 runc (RHSA-2019:4074)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:4074 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

CVE-2018-4074

CVE-2018-4074 is rejected/not used; this CVE entry does not represent an active vulnerability.

Ubuntu: Security Advisory (USN-4074-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-4074

CVE-2019-4074 involves IBM Sterling B2B Integrator Standard Edition, with vulnerable versions 6.0.0.0–6.0.0.1. The issue is cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript, potentially leaking credentials in a trusted session. Connected sources (IBM security bul...

Security fix for the ALT Linux 8 package jq version 1.5-alt3.M80P.1

1.5-alt3.M80P.1 built June 5, 2018 Anton Farygin in task 207483 May 31, 2018 Anton Farygin - security update fixes: CVE-2016-4074...

CVE-2017-4074

...

Debian DSA-4074-1 : imagemagick - security update

This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed image files are processed. %NASLMINLEVEL 70300 C Tenabl...

Updated jq packages fix security vulnerabilities

A heap-based buffer overflow flaw was found in jq's tokenadd function. By tricking a victim into processing a specially crafted JSON file, an attacker could use this flaw to crash jq or, potentially, execute arbitrary code on the victim's system CVE-2015-8863. Stack exhaustion could affect...

openSUSE Security Update : jq (openSUSE-2017-1190)

This update for jq fixes the following minor security issue : - CVE-2016-4074: stack exhaustion could affect availability when parsing untrusted imput bsc1014176 The following tracked packaging changes are included : - Update tests dependencies to increase test coverage bsc1017157 This update was...

OPENSUSE-SU-2017:2834-1 Security update for jq

This update for jq fixes the following minor security issue: CVE-2016-4074: stack exhaustion could affect availability when parsing untrusted imput bsc1014176 The following tracked packaging changes are included: Update tests dependencies to increase test coverage bsc1017157 This update was...

CVE-2015-4074

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a ticket.downloadattachment task...

CVE-2015-4074

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a ticket.downloadattachment task...

CVE-2015-4074

The Joomla! Helpdesk Pro plugin (versions prior to 1.4.0 ) is vulnerable to a directory traversal vulnerability. This flaw allows remote attackers to read arbitrary files on the server by using .. (dot dot) sequences in the filename parameter within the ticket.download_attachment task. Exploitati...

CVE-2016-4074

CVE-2016-4074 affects jq 1.5, where the jv_dump_term() function can be exploited by a crafted JSON file to cause a denial of service through stack exhaustion. Affected product: jq; root cause: parsing of a JSON file via jv_dump_term() leads to stack consumption and potential crash. The issue has ...

Joomla! Component Helpdesk Pro 1.4.0 - Multiple Vulnerabilities

Joomla! Component Helpdesk Pro 1.4.0 - Multiple Vulnerabilities Document Title ============== Joomla! plugin Helpdesk Pro 1.4.0 Reported By =========== Simon Rawet from Outpost24 Kristian Varnai from Outpost24 Gregor Mynarsky from Outpost24 https://www.outpost24.com/ For full details, see;...

Joomla Helpdesk Pro Plugin < 1.4.0 - Multiple Vulnerabilities

Joomla Helpdesk Pro versions prior to 1.4.0 suffers from cross site scripting, local file disclosure, remote file upload, remote SQL injection, and insecure direct object reference vulnerabilities. Document Title ============== Joomla! plugin Helpdesk Pro 1.4.0 Reported By =========== Simon Rawet...

Joomla Helpdesk Pro XSS / File Disclosure / SQL Injection

Document Title ============== Joomla! plugin Helpdesk Pro 1.4.0 Reported By =========== Simon Rawet from Outpost24 Kristian Varnai from Outpost24 Gregor Mynarsky from Outpost24 https://www.outpost24.com/ For full details, see;...

Joomla! Component Helpdesk Pro < 1.4.0 - Multiple Vulnerabilities

Document Title ============== Joomla! plugin Helpdesk Pro 1.4.0 Reported By =========== Simon Rawet from Outpost24 Kristian Varnai from Outpost24 Gregor Mynarsky from Outpost24 https://www.outpost24.com/ For full details, see;...

F5 Networks BIG-IP : Multiple Wireshark vulnerabilities (K15868)

CVE-2013-4074 The dissectcapwapdata function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service application...

CVE-2014-4074

CVE-2014-4074 concerns a privilege-escalation flaw in Windows Task Scheduler. The vulnerability exists in Task Scheduler across Windows 8/8.1, Windows Server 2012 (Gold/R2) and Windows RT/8.1, where a crafted task can be scheduled to abuse privileges. The issue is triggered locally by scheduling ...