94 matches found
CVE-2023-4106
creationtimestamp| type| source ---|---|--- 2023-08-11 12:30:24+00:00| seen| https://t.me/cibsecurity/68330...
CVE-2023-4106 A guest user can perform various actions on public playbooks
Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks...
CVE-2023-4106
Mattermost Server contains CVE-2023-4106: a flaw where the server does not verify guest status before performing actions on public playbooks, allowing a guest to view, join, edit, export, and archive. The connected Nessus entry notes affected ranges: Mattermost Server < 7.8.8, < 7.9.6 (for ...
CVE-2022-4106
creationtimestamp| type| source ---|---|--- 2022-12-19 16:10:32+00:00| seen| https://t.me/cibsecurity/54859...
CVE-2022-4106 Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Download
The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server...
CVE-2022-4106 Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Download
The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server...
CVE-2022-4106
The Wholesale Market for WooCommerce WordPress plugin (pre-1.0.7) exposes an unauthenticated arbitrary-file-download vulnerability due to missing authorization checks and improper handling of user input when building system paths. Impact is configured as high (C:H) for confidentiality with no int...
CVE-2021-4106
creationtimestamp| type| source ---|---|--- 2022-02-16 20:42:27+00:00| seen| https://t.me/cibsecurity/37612...
CVE-2021-4106
A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges. This issue affects: SNOW Snow Inventory Java Scanner 1.0...
CVE-2021-4106
CVE-2021-4106 affects SNOW Snow Inventory Java Scanner 1.0. Multiple sources describe a vulnerability where an attacker can run malicious code with elevated privileges. The root cause is described in at least one source as a problem with software privilege filtering. The NVD entry notes the impac...
RHEL 8 : flatpak (RHSA-2021:4106)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4106 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Sandbox bypass via rece...
SUSE: Security Advisory (SUSE-SU-2015:1045-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-4106
CVE-2013-4106 documents a cross-site scripting (XSS) vulnerability in Cryptocat’s Conversation Overview Nickname feature, affecting versions prior to 2.0.22. The provided sources consistently describe an XSS issue without detailing the root cause, specific exploit vectors, or affected platforms b...
CVE-2019-4106
IBM WebSphere eXtreme Scale Admin Console (version 8.6) is vulnerable to cross-site scripting in the Admin Console UI, enabling an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The issue is identified as CVE-2019-4106. According to IBM’s bu...
Ubuntu 16.04 LTS / 18.04 LTS : NLTK vulnerability (USN-4106-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4106-1 advisory. Mike Salvatore discovered that NLTK mishandled crafted ZIP archives during extraction. A remote attacker could use this vulnerability to write arbitra...
CVE-2018-4106
Summary of CVE-2018-4106 (Apple macOS Terminal Bracketed Paste Mode) Affected products: macOS before 10.13.4 (High Sierra line). The issue resides in Terminal’s Bracketed Paste Mode, allowing user‑assisted attackers to inject arbitrary commands into pasted content. This is a command‑injection ris...
Apple Mac OS X Security Updates (HT208692)-02
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-4106
CVE-2017-4106 entry is rejected/not used and does not represent an active vulnerability.
Debian DSA-4106-1 : libtasn1-6 - security update
Two vulnerabilities were discovered in Libtasn1, a library to manage ASN.1 structures, allowing a remote attacker to cause a denial of service against an application using the Libtasn1 library. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...