CVE-2020-4165

IBM Security Guardium Insights 2.0.1 is affected by CVE-2020-4165 (clickjacking). A remote attacker could lure a user to a malicious site and hijack the victim’s clicking actions, potentially enabling further attacks. IBM’s bulletin indicates that Guardium Insights has addressed this vulnerabilit...

Ubuntu 16.04 LTS / 18.04 LTS : Firefox regressions (USN-4165-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4165-2 advisory. USN-4165-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problems. We apologize for the...

Ubuntu 16.04 LTS / 18.04 LTS : Firefox vulnerabilities (USN-4165-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4165-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could...

Ubuntu: Security Advisory (USN-4165-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-4165

The CVE-2019-4165 entry pertains to IBM StoredIQ. Affected versions are IBM StoredIQ 7.6.0.0 through 7.6.0.18, where a remote attacker can cause a denial-of-service by sending repeated requests to the server. The root cause is described as an input validation error in StoredIQ, enabling resource ...

openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2019:0081-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0092-1)

This update for webkit2gtk3 to version 2.22.5 fixes the following issues : Security issues fixed : CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306,...

Debian DSA-4165-1 : ldap-account-manager - security update

Michal Kedzior found two vulnerabilities in LDAP Account Manager, a web front-end for LDAP directories. - CVE-2018-8763 The found Reflected Cross Site Scripting XSS vulnerability might allow an attacker to execute JavaScript code in the browser of the victim or to redirect her to a malicious...

CVE-2018-4165

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...

CVE-2018-4165

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...

CVE-2018-4165

CVE-2018-4165 affects Apple WebKit components across multiple Apple platforms. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, via memory corruption in WebKit. Affected products include iOS prior to 11.3, Safari prior to 11.1, iCloud...

CVE-2018-4165

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...

macOS : Apple Safari < 11.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108805;...

Apple iTunes < 12.7.4 WebKit Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.7.4. It is, therefore, affected by multiple vulnerabilities in WebKit as referenced in the HT208694 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

Debian: Security Advisory (DSA-4165-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-4165

...

CVE-2017-4165

CVE-2017-4165 entry is rejected/not used and does not represent an active vulnerability.

UBUNTU-CVE-2015-4165

The snapshot API in Elasticsearch before 1.6.0 when another application exists on the system that can read Lucene files and execute code from them, is accessible by the attacker, and the Java VM on which Elasticsearch is running can write to a location that the other application can read and...

CVE-2015-4165

Elasticsearch CVE-2015-4165 affects versions 1.0.0 through 1.5.2. The vulnerability leverages the snapshot API to place writeable snapshot metadata files in locations read by another application, which could lead to arbitrary code execution when the Java VM running Elasticsearch can write to such...

CVE-2016-4165

Adobe Brackets is affected by CVE-2016-4165 in the extension manager prior to v1.7, where invalid input can lead to an unspecified impact. Connected sources also reference CVE-2016-4164 and note a security update (APS B16-20) that resolves both CVE-2016-4164 and CVE-2016-4165; users should apply ...