79 matches found
Ubuntu: Security Advisory (USN-4146-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2016-0228)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-4146
creationtimestamp| type| source ---|---|--- 2022-01-18 18:24:52+00:00| seen| https://t.me/cibsecurity/35705...
CVE-2021-4146
Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...
CVE-2021-4146
CVE-2021-4146 relates to Business Logic Errors in pimcore/pimcore prior to version 10.2.6. Multiple connected advisories describe a flaw where discount logic can yield negative amounts, enabling unintended behavior in pricing (e.g., negative cart discounts). The issue stems from insufficient inpu...
CVE-2021-4146 Business Logic Errors in pimcore/pimcore
Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...
CVE-2020-4146
creationtimestamp| type| source ---|---|--- 2021-11-12 18:39:04+00:00| seen| https://t.me/cibsecurity/32310...
CVE-2020-4146
IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 174129...
CVE-2020-4146
CVE-2020-4146 affects IBM Security SiteProtector System 3.1.1. The root cause is missing the HttpOnly flag, enabling a remote attacker to obtain sensitive information from the Web interface. Documentsconfirm the affected product/version and describe the impact as information disclosure. Public-fa...
Security Bulletin: IBM Security SiteProtector System is affected by vulnerability CVE-2020-4146
Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Core XPU Vulnerability Details CVEID: CVE-2020-4146 DESCRIPTION: IBM SiteProtector Appliance could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker...
Security Bulletin: Information Disclosure Vulnerabilities Affect IBM Sterling B2B Integrator (CVE-2019-4146, CVE-2019-4222)
Summary IBM Sterling B2B Integrator Standard Edition has addressed the information disclosure vulnerabilities Vulnerability Details CVEID: CVE-2019-4146 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to obtain sensitive document information under unusu...
Ubuntu 16.04 LTS / 18.04 LTS : ClamAV vulnerabilities (USN-4146-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4146-1 advisory. It was discovered that ClamAV incorrectly handled unpacking ZIP files. A remote attacker could possibly use this issue to cause ClamAV to...
Ubuntu: Security Advisory (USN-4146-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4146
CVE-2019-4146 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1 . The vulnerability is an information disclosure that could allow an authenticated user to obtain sensitive document information under unusual circumstances. The IBM security bulletin for this CVE (and CVE...
CVE-2018-4146
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
CVE-2018-4146
CVE-2018-4146 affects Apple WebKit components across iOS, Safari, tvOS, watchOS, iCloud/Desktop WebKit stack. The issue allows memory corruption triggered by a crafted website, potentially causing a denial of service. Affected: iOS before 11.3; Safari before 11.1; iCloud on Windows before 7.4; iT...
CVE-2018-4146
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
macOS : Apple Safari < 11.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108805;...
Apple iTunes < 12.7.4 WebKit Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.7.4. It is, therefore, affected by multiple vulnerabilities in WebKit as referenced in the HT208694 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...