Rocky Linux 8 : python-lxml (RLSA-2021:4158)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4158 advisory. - An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safeattrsonly and forms arguments, the Cleaner clas...

BELL-CVE-2021-4158 CVE-2021-4158 does not affect BellSoft software

Bulletin has no description...

CVE-2023-4158

creationtimestamp| type| source ---|---|--- 2023-08-04 22:41:26+00:00| seen| https://t.me/cibsecurity/67801...

CVE-2023-4158 Cross-site Scripting (XSS) - Stored in omeka/omeka-s

Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.3...

CVE-2023-4158 Cross-site Scripting (XSS) - Stored in omeka/omeka-s

Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.3...

CVE-2023-4158

Omeka S prior to 4.0.3 is affected by a stored XSS vulnerability in the omeka/omeka-s codebase. The evidence across multiple sources confirms Cross-site Scripting (XSS) and that the issue exists before version 4.0.3; no explicit root-cause or remediation details are provided in the supplied docum...

Oracle Linux 9 : java-11-openjdk (ELSA-2023-4158)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4158 advisory. 1:11.0.20.0.8-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no...

RHEL 9 : java-11-openjdk (RHSA-2023:4158)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4158 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

CVE-2022-4158

creationtimestamp| type| source ---|---|--- 2022-12-26 16:40:50+00:00| seen| https://t.me/cibsecurity/55353 2025-04-11 23:51:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11518...

CVE-2022-4158 Contest Gallery < 19.1.5 - Unauthenticated SQL Injection

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgFields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive...

CVE-2022-4158 Contest Gallery < 19.1.5 - Unauthenticated SQL Injection

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgFields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive...

CVE-2022-4158

The CVE-2022-4158 entry concerns the Contest Gallery WordPress plugin (versions prior to 19.1.5.1) and Contest Gallery Pro (prior to 19.1.5.1). The vulnerability arises from failing to escape the cg_Fields POST parameter before concatenating it into an SQL query within users-registry-check-regist...

Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a later upstream version: qemu-kvm 7.0.0...

CVE-2021-4158 affecting package qemu for versions less than 6.2.0-7

CVE-2021-4158 affecting package qemu for versions less than 6.2.0-7. A patched version of the package is available...

CVE-2021-4158

creationtimestamp| type| source ---|---|--- 2022-08-24 20:22:47+00:00| seen| https://t.me/cibsecurity/48655...

CVE-2021-4158

A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition...

CVE-2021-4158

A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition...

CVE-2021-4158

CVE-2021-4158 is a NULL pointer dereference in QEMU’s ACPI code, specifically a NULL pointer dereference in pci_write() within hw/acpi/pcihp.c, which can be triggered by a malicious, privileged guest user to crash QEMU on the host and cause a denial-of-service. The issue is evidenced across multi...

OESA-2022-1772 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in ...