Lucene search
+L

85 matches found

Cvelist
Cvelist
added 2022/01/19 10:20 p.m.22 views

CVE-2021-4143 Cross-site Scripting (XSS) - Generic in bigbluebutton/bigbluebutton

Cross-site Scripting XSS - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0...

8.1CVSS6.2AI score0.0089EPSS
SaveExploits1References2
CVE
CVE
added 2022/01/19 10:20 p.m.71 views

CVE-2021-4143

CVE-2021-4143 affects the open‑source web conferencing platform BigBlueButton prior to 2.4.0. The vulnerability is a generic Cross-site Scripting (XSS) due to lack of proper validation of client‑side data by the web application, enabling injection of arbitrary JavaScript in other users’ browsers ...

8.1CVSS6.3AI score0.0089EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2016:2305-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6AI score0.04198EPSS
SaveExploits0References8
CVE
CVE
added 2019/04/08 2:50 p.m.57 views

CVE-2019-4143

The CVE-2019-4143 issue affects IBM Cloud Private before patches: IBM Cloud Private Key Management Service (KMS) in versions 3.1.1 and 3.1.2 can allow a local attacker to obtain sensitive information from the KMS plugin container log. Root cause involves information disclosure via container logs ...

5.5CVSS5.1AI score0.00356EPSS
SaveExploits0References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/04/02 5:15 p.m.22 views

Security Bulletin: A Security Vulnerability affects IBM Cloud Private - CVE-2019-4143

Summary The IBM Cloud Private Key Management Service could allow a local user to obtain sensitive from the KMS plugin container log Vulnerability Details CVEID: CVE-2019-4143 DESCRIPTION: The IBM Cloud Private Key Management Service could allow a local user to obtain sensitive from the KMS plugin...

5.5CVSS0.8AI score0.00356EPSS
SaveExploits0Affected Software1
Apple
Apple
added 2018/11/17 12:30 p.m.69 views

About the security content of tvOS 11.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

9.8CVSS0.4AI score0.42808EPSS
SaveExploits9Affected Software1
Cvelist
Cvelist
added 2018/04/03 6:00 a.m.30 views

CVE-2018-4143

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

8.1AI score0.02713EPSS
SaveExploits0References6
CVE
CVE
added 2018/04/03 6:00 a.m.84 views

CVE-2018-4143

CVE-2018-4143 affects Apple kernels across iOS (pre-11.3), macOS (pre-10.13.4), tvOS (pre-11.3), and watchOS (pre-4.3). Root cause: memory corruption in the Kernel enabling a crafted app to execute arbitrary code with kernel privileges or cause a denial of service. Public details confirm the issu...

9.3CVSS8.1AI score0.02713EPSS
SaveExploits0References6Affected Software4
Tenable Nessus
Tenable Nessus
added 2018/03/19 12:00 a.m.31 views

Debian DSA-4143-1 : firefox-esr - security update

Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

9.8CVSS8AI score0.11421EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2018/03/16 2:04 p.m.8 views

CVE-2017-4143

...

SaveExploits0
CVE
CVE
added 2018/03/16 2:04 p.m.24 views

CVE-2017-4143

This CVE-2017-4143 entry is rejected/not used and does not represent an active vulnerability entry.

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2017/03/17 12:00 a.m.31 views

Microsoft IE And Microsoft Edge Flash Player Multiple Vulnerabilities (3167685)

This host is missing a critical security update according to Microsoft Bulletin MS16-083. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

10CVSS8.1AI score0.25419EPSS
SaveExploits12References11
Tenable Nessus
Tenable Nessus
added 2016/09/26 12:00 a.m.30 views

openSUSE Security Update : wpa_supplicant (openSUSE-2016-1104)

This update for wpasupplicant fixes the following issues : - CVE-2015-4141: WPS UPnP vulnerability with HTTP chunked transfer encoding. bnc930077 - CVE-2015-4142: Integer underflow in AP mode WMM Action frame processing. bnc930078 - CVE-2015-4143: EAP-pwd missing payload length validation...

5CVSS5.9AI score0.04198EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2016/09/15 12:00 a.m.38 views

SUSE SLED12 / SLES12 Security Update : wpa_supplicant (SUSE-SU-2016:2305-1)

This update for wpasupplicant fixes the following issues : - CVE-2015-4141: WPS UPnP vulnerability with HTTP chunked transfer encoding. bnc930077 - CVE-2015-4142: Integer underflow in AP mode WMM Action frame processing. bnc930078 - CVE-2015-4143: EAP-pwd missing payload length validation...

5CVSS6AI score0.04198EPSS
SaveExploits0References16
ALT Linux
ALT Linux
added 2016/06/27 12:00 a.m.218 views

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt63

3:11-alt63 built June 27, 2016 Sergey V Turchin in task 166413 June 27, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132, CVE-2016-4133,...

10CVSS9.1AI score0.25419EPSS
SaveExploits12
ALT Linux
ALT Linux
added 2016/06/27 12:00 a.m.209 views

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt63

3:11-alt63 built June 27, 2016 Sergey V Turchin in task 166414 June 27, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132, CVE-2016-4133,...

10CVSS9.1AI score0.25419EPSS
SaveExploits12
Tenable Nessus
Tenable Nessus
added 2016/06/20 12:00 a.m.44 views

openSUSE Security Update : flash-player (openSUSE-2016-740)

Adobe flash-player was updated to 11.2.202.626 to fix the following security issues : Security update to 11.2.202.626 boo984695 : - APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132,...

10CVSS8.1AI score0.25419EPSS
SaveExploits12References38
Tenable Nessus
Tenable Nessus
added 2016/06/20 12:00 a.m.41 views

openSUSE Security Update : flash-player (openSUSE-2016-743)

Adobe flash-player was updated to 11.2.202.626 to fix the following security issues : Security update to 11.2.202.626 boo984695 : - APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132,...

10CVSS8.1AI score0.25419EPSS
SaveExploits12References38
OpenVAS
OpenVAS
added 2016/06/18 12:00 a.m.36 views

SUSE: Security Advisory for flash-player (SUSE-SU-2016:1613-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.25419EPSS
SaveExploits12References3
RedhatCVE
RedhatCVE
added 2016/06/16 4:21 p.m.28 views

CVE-2016-4143

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083...

9.3CVSS6AI score0.0381EPSS
SaveExploits0References2
Rows per page
Query Builder