123 matches found
CVE-2021-4075
CVE-2021-4075 (snipe/snipe-it) is corroborated across multiple sources as a Server-Side Request Forgery (SSRF) issue. The connected advisories identify the vulnerability as exploitable via the Slack integration, enabling blind POST-based SSRF where an attacker with admin access could issue reques...
SUSE: Security Advisory (SUSE-SU-2013:1276-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4075
Summary: CVE-2020-4075 affects Electron before 7.2.4, 8.2.4, and 9.0.0-beta21, allowing arbitrary local file read by defining unsafe window options on a child window opened with window.open. Root cause: unsafe window options on child windows. Impact: local file read via manipulated window options...
@amazingcat/amazing-iohook (8.2.3), @donmahallem/trapeze-client-desktop (5.1.1) +14 more potentially affected by CVE-2020-4075 via electron (>=8.0.0, <=8.2.3)
electron NPM version =8.0.0, =8.0.0-beta.1, =0.1.0, =4.0.0-beta.1, =1.0.1, =1.7.0, =1.0.3, =1.0.5, =1.1.35, =3.1.20, =3.2.1 and more Source cves: CVE-2020-4075 Source advisory: OSV:GHSA-F9MQ-JPH6-9MHM...
@amazingcat/amazing-iohook (>=7.1.4, <=8.1.1), @barajs/electron (>=1.0.0, <=1.0.2) +30 more potentially affected by CVE-2020-4075 via electron (>=7.0.0, <=7.2.3)
electron NPM version =7.0.0, =7.1.4, =1.0.0, =0.0.3, =0.3.0, =4.0.0-alpha.3, =7.0.0-alpha.3, =4.0.0-alpha.1, =0.0.1, =7.0.0-alpha.7, =1.7.0, =7.0.0-beta.1, =8.0.0-pre, =0.31.0-alpha.2, =0.31.0-alpha.33 and more Source cves: CVE-2020-4075 Source advisory: OSV:GHSA-F9MQ-JPH6-9MHM...
CVE-2018-4075
CVE-2018-4075 entry is rejected/not used; this candidate is not associated with an active vulnerability.
Ubuntu 16.04 LTS / 18.04 LTS : Exim vulnerability (USN-4075-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4075-1 advisory. Jeremy Harris discovered that Exim incorrectly handled sort expansions. In environments where sort expansions are used, a remote attacker could possib...
CVE-2017-4075
CVE-2017-4075 is rejected/not used and does not represent an active vulnerability entry.
Debian DSA-4075-1 : thunderbird - security update
Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service, information disclosure or spoofing of sender's email addresses. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...
Debian: Security Advisory (DSA-4075-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-4075
CVE-2015-4075 – Joomla! Helpdesk Pro (
CVE-2016-4075
Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL...
CVE-2016-4075
CVE-2016-4075 affects Opera Mini 13 and Opera Stable 36, allowing remote attackers to spoof the displayed URL via a crafted HTML document related to about:blank. Connected sources confirm this address-bar spoofing vulnerability in Opera products and note remote exploitation through specially craf...
CVE-2016-4075
Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL...
Scientific Linux Security Update : wireshark on SL6.x i386/x86_64 (20170321)
Security Fixes : - Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. CVE-2015-3811, CVE-2015-3812, CVE-2015-3813, CVE-2013-4075 %NASLMINLEVEL 70300 C Tenable Network...
Oracle Linux 6 : wireshark (ELSA-2017-0631)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0631 advisory. - segfault with CVE-2013-4075 capture - valgrind error with CVE-2015-3812 capture - Resolves: CVE-2013-4075 Tenable has extracted the preceding...
wireshark security and bug fix update
1.8.10-25.0.1 - Fix ocfs2 dissector John Haxby orabug 21505640 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.8.10-25 - rebuilt 1.8.10-24 - Related: 1245887 - segfault with CVE-2013-4075 capture - valgrind error with CVE-2015-3812 capture 1.8.10-23 - Resolves: 12381...
Oracle: Security Advisory (ELSA-2011-0017)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
milb.com XSS vulnerability
Vulnerable URL: http://www.milb.com/search/?start=1"===milb" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4075 Google Pagerank| 6 VIP website status:| Yes Check milb.com SSL...