120 matches found
AZL-36977 CVE-2022-4123 affecting package podman for versions less than 5.6.1-2
A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...
AZL-11587 CVE-2022-4123 affecting package podman 4.1.1-26
A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...
CVE-2022-4123
CVE-2022-4123 involves a flaw in Buildah (used with Podman) where an incorrect absolute path traversal discloses the local path and lowest subdirectory, impacting confidentiality. Connected data shows affected Podman packages (e.g., on Mariner) for versions before 5.6.1-2, with an upgraded packag...
CVE-2022-4123
A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...
AlmaLinux 8 : firefox (ALSA-2021:4123)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2021:4123 advisory. - The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigati...
Rocky Linux 8 : firefox (RLSA-2021:4123)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4123 advisory. - The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or...
Mageia: Security Advisory (MGASA-2016-0228)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-4123
creationtimestamp| type| source ---|---|--- 2021-12-16 12:37:09+00:00| seen| https://t.me/cibsecurity/34133...
CVE-2021-4123
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4123
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4123 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
Oracle Linux 8 : firefox (ELSA-2021-4123)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-4123 advisory. 91.3.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 91.3.0-1 - Update to 91.3.0...
RHEL 8 : firefox (RHSA-2021:4123)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4123 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Ubuntu 18.04 LTS : npm/fstream vulnerability (USN-4123-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4123-1 advisory. It was discovered that npm/fstream incorrectly handled certain crafted tarballs. An attacker could use this vulnerability to write aritrary files to the filesyste...
CVE-2018-4123
CVE-2018-4123 affects Apple iOS before 11.3, specifically the Clock component’s alarm/timer handling. The issue is an information-disclosure vulnerability that could allow a physically proximate attacker to obtain the iTunes email address. The root cause is described as an information-disclosure ...
CVE-2017-4123
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
CVE-2017-4123
CVE-2017-4123 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
Debian DSA-4123-1 : drupal7 - security update
Multiple vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2018-001 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
Debian: Security Advisory (DSA-4123-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...