129 matches found
RHEL 8 : resource-agents (RHSA-2021:4139)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4139 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with severa...
CentOS 8 : resource-agents (CESA-2021:4139)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4139 advisory. - python-pygments: Infinite loop in SML lexer may lead to DoS CVE-2021-20270 - python-pygments: ReDoS in multiple lexers CVE-2021-27291 Note that Nessu...
Moderate: Red Hat Security Advisory: resource-agents security, bug fix, and enhancement update
An update for resource-agents is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Ubuntu 16.04 LTS / 18.04 LTS : File Roller vulnerability (USN-4139-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4139-1 advisory. It was discovered that File Roller incorrectly handled certain TAR files. An attacker could possibly use this issue to overwrite sensitive files durin...
CVE-2019-4139
CVE-2019-4139 affects IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1. The issue is a cross-site scripting (XSS) vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The NVD description confir...
iOS/macOS - 'task_swap_mach_voucher()' Use-After-Free
/ voucherswap-poc.c Brandon Azad / if 0 iOS/macOS: taskswapmachvoucher does not respect MIG semantics leading to use-after-free The dangers of not obeying MIG semantics have been well documented: see issues 926 CVE-2016-7612, 954 CVE-2016-7633, 1417 CVE-2017-13861, asyncwake, 1520 CVE-2018-4139,...
CVE-2018-4139
creationtimestamp| type| source ---|---|--- 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44561...
CVE-2018-4139
CVE-2018-4139 affects macOS High Sierra before 10.13.4, specifically the kext tools component. A crafted application can trigger memory corruption to either execute arbitrary code with system privileges or cause a denial of service. The issue is addressed by macOS 10.13.4 (Security Update 2018-00...
Apple Mac OS X Security Updates (HT208692)-02
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-4139
CVE-2017-4139 is rejected and not used; this ID does not represent an active vulnerability entry.
Debian DSA-4139-1 : firefox-esr - security update
Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code, denial of service or information disclosure. C Tenable Network Security, Inc. The descriptive text and package...
Debian: Security Advisory (DSA-4139-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-4139
CVE-2014-4139 is rejected/not used as stated in the Initial Description.
CVE-2010-4139
This CVE entry is rejected/not used; the number is not associated with an active vulnerability.
CVE-2012-4139
CVE-2012-4139 is rejected/not used; it does not correspond to an active vulnerability entry.
iu.edu XSS vulnerability
Vulnerable URL: http://www.iu.edu/liblilly/ask.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4139 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value...