CVE-2023-4105

creationtimestamp| type| source ---|---|--- 2023-08-11 12:30:20+00:00| seen| https://t.me/cibsecurity/68326...

CVE-2023-4105 Attachment of deleted message in a thread remains accessible and downloadable

Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able to access and download the attachment of a deleted message...

CVE-2023-4105

Mattermost Server vulnerability CVE-2023-4105: In Mattermost Server 7.x prior to 7.8.8, 7.9.x prior to 7.9.6, and 7.10.x prior to 7.10.4, attachments are not removed when deleting a thread message, allowing a simple user to still access/download the deleted message’s attachment. Root cause: failu...

CVE-2023-4105 Attachment of deleted message in a thread remains accessible and downloadable

Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able to access and download the attachment of a deleted message...

CVE-2021-4105

creationtimestamp| type| source ---|---|--- 2023-02-24 14:49:22+00:00| seen| https://t.me/cibsecurity/58869...

CVE-2021-4105

CVE-2021-4105 affects BG-TEK COSLAT Firewall (versions 5.24.0.R.20180630 through 5.24.0.R.20210727). The root cause is improper handling of parameters, enabling Remote Code Inclusion. Impact is unauthenticated remote code execution with high risk to confidentiality, integrity, and availability (p...

CVE-2021-4105 Unauthenticated Remote Code Execution on COSLAT Firewall

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion. This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727...

SUSE CVE-2011-4105

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...

SUSE CVE-2015-4105

Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service host disk consumption via certain invalid operations...

CVE-2022-4105

creationtimestamp| type| source ---|---|--- 2022-11-21 22:37:19+00:00| seen| https://t.me/cibsecurity/53285...

CVE-2022-4105 Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack clickjacking and an HTML injection which disables the use of the history page...

CVE-2022-4105 Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack clickjacking and an HTML injection which disables the use of the history page...

CVE-2022-4105

CVE-2022-4105 refers to a stored XSS in Kiwi TCMS’s kiwi Test Plan. The vulnerability allows attacker-supplied JavaScript to execute in the context of the application, potentially enabling a chained HTML injection that can perform a UI redressing attack (clickjacking) and an HTML injection that d...

Security Bulletin: Vulnerability inApache Log4j - CVE-2021-4105 may affect IBM Watson Assistant for IBM Cloud Pak for Data

Summary A potential vulnerability inApache Log4j - CVE-2021-4105 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Several components of IBM Watson Assistant for IBM Cloud Pak for Data use Log4j to log diagnostic data unrelated to customer input. Refer to detail...

SUSE: Security Advisory (SUSE-SU-2015:1045-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4105

Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure...

CVE-2013-4105

Cryptocat before version 2.0.22 is affected by an information disclosure vulnerability in the Multiparty Encryption Scheme. The issue, described across multiple sources, stems from errors during operation/configuration of the networked Cryptocat setup, allowing disclosure of sensitive information...

Ubuntu 16.04 LTS / 18.04 LTS : CUPS vulnerabilities (USN-4105-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4105-1 advisory. StephanZeisbergdiscovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issu...

CVE-2018-4105

CVE-2018-4105 affects APFS in macOS before 10.13.4. An injection issue could trigger truncation of an APFS volume password due to insufficient input validation. Apple’s entry notes this vulnerability under the APFS component and links it to the macOS 10.13.4 security updates; the fix is described...

CVE-2017-4105

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...