75 matches found
CVE-2022-4090
creationtimestamp| type| source ---|---|--- 2022-11-24 16:19:35+00:00| seen| https://t.me/cibsecurity/53478...
CVE-2022-4090
CVE-2022-4090: Cross-site request forgery in the rickxy Stock Management System affecting processing of us_transac.php?action=add. The issue allows remote initiation and exploitation, with public disclosure noted across multiple sources. Root cause is described as manipulation leading to CSRF; af...
CVE-2021-4090 affecting package kernel for versions less than 5.15.26.1-1
CVE-2021-4090 affecting package kernel for versions less than 5.15.26.1-1. A patched version of the package is available...
Ubuntu: Security Advisory (USN-5362-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-4090 affecting package kernel 5.10.189.1-1
CVE-2021-4090 affecting package kernel 5.10.189.1-1. A patched version of the package is available...
BELL-CVE-2021-4090 CVE-2021-4090 does not affect BellSoft software
Bulletin has no description...
CVE-2021-4090
CVE-2021-4090 : A Linux kernel NFSD out-of-bounds write in nfsd4_decode_bitmap4 (fs/nfsd/nfs4xdr.c) can be triggered by a missing sanity check, allowing a local privileged user to access out-of-bounds memory and threaten system integrity and confidentiality. Multiple connected sources confirm the...
CVE-2021-4090
An out-of-bounds OOB memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmvalbmlen-1 in nfsd4decodebitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system...
Ubuntu: Security Advisory (USN-5265-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-5217-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5217-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5217-1 advisory. It was discovered that the NFS server implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this ...
CVE-2021-4090
An out-of-bounds OOB memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmvalbmlen-1 in nfsd4decodebitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system...
SUSE: Security Advisory (SUSE-SU-2018:4090-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4090
creationtimestamp| type| source ---|---|--- 2020-07-18 00:55:22+00:00| seen| Telegram/G7g4GVrTqUP3TYWG50cWryS0USn5UiPsTNfCaG3Qarue0...
CVE-2019-4090
CVE-2019-4090 affects HCL Campaign. The connected sources confirm a cross-site scripting vulnerability in the Campaign Description field, with exploitation leading to injection of malicious code. CNVD details affected versions: 10.1.x, 11.0.1, and 11.1.0.x. The root cause is an XSS flaw in the de...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
CVE-2013-4090
CVE-2013-4090 concerns the Varnish HTTP cache before 3.0.4, due to an ACL bug in the access control logic. Affected component is the Varnish ACL handling in versions prior to 3.0.4. The practical impact is an integrity issue (I:H in CVSS v3.1) with potentially improper access control, as indicate...