CVE-2022-4085

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

PT-2022-3893 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLink T6 version V5.9c.4085 B20190428 Description: The issue is related to the lack of input data sanitization in the "Main" function of the TOTOLink T6 mesh system's firmware. This allows a remote attacker to execute arbitrary commands...

CVE-2020-4085

CVE-2020-4085 affects HCL Connections (reported in CNVD-2020-33350 for versions 6.5, 6.0 and 5.5) and is described as an information-disclosure vulnerability where sensitive data could be exposed via stack traces to a local user. The NVD entry corroborates information leakage with CVSS metrics (v...

CVE-2020-4085

"HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user."...

Ubuntu 16.04 LTS / 18.04 LTS : Sigil vulnerability (USN-4085-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4085-1 advisory. Mike Salvatore discovered that Sigil mishandled certain malformed EPUB files. An attacker could use this vulnerability to write arbitrary files to the...

CVE-2018-4085

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "QuartzCore" component. It allows remote attackers to execute arbitrary code or cause a deni...

CVE-2018-4085

CVE-2018-4085 affects Apple devices via the QuartzCore component. A memory corruption issue in processing web content could allow remote code execution or cause a denial of service (application crash). Affected: iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, watchOS before 4.2.2. Mi...

CVE-2017-4085

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-4085

...

CVE-2017-4085

CVE-2017-4085 entry is rejected/not used per the description.

Apple Mac OS X Multiple Vulnerabilities-02 (HT208465)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4085-1 : xmltooling - security update

Philip Huppert discovered the Shibboleth service provider is vulnerable to impersonation attacks and information disclosure due to mishandling of DTDs in the XMLTooling XML parsing library. For additional details please refer to the upstream advisory at...

Debian: Security Advisory (DSA-4085-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4085

CVE-2015-4085 is a directory traversal vulnerability in Etherpad frontend tests (node/hooks/express/tests.js) affecting Etherpad frontend tests prior to version 1.6.1. Exploitation could allow an attacker to browse files, impacting confidentiality (Partial). The issue is documented across multipl...

Wireshark NCP dissector Denial of Service Vulnerability (May 2016) - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

CVE-2016-4085

Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long string in a packet...

UBUNTU-CVE-2016-4085

Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long string in a packet...

CVE-2016-4085

CVE-2016-4085 : In Wireshark 1.12.x prior to 1.12.11, a stack-based buffer overflow exists in the NCP dissector (epan/dissectors/packet-ncp2222.inc) within the Wireshark NCP dissector. A long string in a network packet can be used by a remote attacker to trigger a denial of service (application c...

CVE-2014-4085

CVE-2014-4085 maps to a Microsoft Internet Explorer memory corruption vulnerability. The connected documents describe multiple IE use-after-free remote code execution advisories (ZDI-14-306, -14-308, -14-317, -14-315, -14-312, -14-316, -14-318, -14-313, -14-314, -14-317, etc.), each detailing fla...

Microsoft Internet Explorer CVE-2014-4085 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...