126 matches found
CVE-2022-4111 Improper Validation of Specified Quantity in Input in tooljet/tooljet
Unrestricted file size limit can lead to DoS in tooljet/tooljet 1.27 by allowing a logged in attacker to upload profile pictures over 2MB...
CVE-2022-4111
ToolJet (tooljet/tooljet) versions prior to 1.27.0 are affected by CVE-2022-4111 due to an unrestricted file size limit for user avatar uploads, allowing a logged-in attacker to upload profile pictures over 2MB and cause DoS (site downtime). Root cause: improper handling/validation of file size l...
CVE-2022-4111 Improper Validation of Specified Quantity in Input in tooljet/tooljet
Unrestricted file size limit can lead to DoS in tooljet/tooljet 1.27 by allowing a logged in attacker to upload profile pictures over 2MB...
CVE-2022-4111 Improper Validation of Specified Quantity in Input in tooljet/tooljet
Unrestricted file size limit can lead to DoS in tooljet/tooljet 1.27 by allowing a logged in attacker to upload profile pictures over 2MB...
CVE-2021-4111
yetiforcecrm is vulnerable to Business Logic Errors...
CVE-2021-4111
yetiforcecrm is vulnerable to Business Logic Errors...
CVE-2021-4111 Business Logic Errors in yetiforcecompany/yetiforcecrm
yetiforcecrm is vulnerable to Business Logic Errors...
CVE-2021-4111
CVE-2021-4111 affects YetiforceCRM/YetiForceCRM. The vulnerability arises from a business logic error where the product amount can be set to a negative number, indicating a validation gap in inventory-related handling. Documented impact includes manipulation of quantities and related operations; ...
CentOS 8 : firefox (CESA-2019:4111)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:4111 advisory. - Mozilla: Buffer overflow in plain text serializer CVE-2019-17005 - Mozilla: Use-after-free in worker destruction CVE-2019-17008 - Mozilla:...
HP Insight Diagnostics Online Edition Cross-Site Scripting (CVE-2010-4111)
A script injection vulnerability exists in HP Insight Diagnostics. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
RHEL 8 : firefox (RHSA-2019:4111)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:4111 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Ubuntu 16.04 LTS / 18.04 LTS : Ghostscript vulnerabilities (USN-4111-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4111-1 advisory. Hiroki Matsukuma discovered that the PDF interpreter in Ghostscript did not properly restrict privileged calls when -dSAFER restrictions were...
CVE-2018-4111
CVE-2018-4111 affects macOS Mail on macOS versions before 10.13.4. The flaw lets a man-in-the-middle read S/MIME encrypted message content by delivering an HTML email that references remote resources but lacks a valid S/MIME signature. The public description states Apple addressed this by not loa...
CVE-2017-4111
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
Debian DSA-4111-1 : libreoffice - security update
Mikhail Klementev, Ronnie Goodrich and Andrew Krasichkov discovered that missing restrictions in the implementation of the WEBSERVICE function in LibreOffice could result in the disclosure of arbitrary files readable by the user who opens a malformed document. C Tenable Network Security, Inc. The...
Debian: Security Advisory (DSA-4111-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
High severity vulnerability that affects rails.
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service application hang or "data loss," a differen...