CVE-2021-4168

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4168 Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4168

CVE-2021-4168 is a CSRF vulnerability in the open-source tool showdoc (star7th/showdoc). The CVE entry documents Cross-Site Request Forgery affecting showdoc, with references to multiple advisories (GHSA, CNVD, CNVD, OSV, NVD) indicating CSRF exploitation potential. Some connected sources (HuntrP...

RHEL 7 : kernel (RHSA-2019:4168)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4168 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: brcmfmac heap buffer overflow in...

CVE-2013-4168

Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...

UBUNTU-CVE-2013-4168

Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...

CVE-2013-4168

CVE-2013-4168 is a documented cross-site scripting (XSS) vulnerability in SmokePing 2.6.9, specifically affecting the start and end time fields. The issue is described as XSS in these input fields, with CVSS scores provided (NVD CVSSv2 base 4.3, CVSSv3.1 base 6.1) indicating a network-based entry...

CVE-2013-4168

Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...

Ubuntu 18.04 LTS : Libidn2 vulnerabilities (USN-4168-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4168-1 advisory. It was discovered that Libidn2 incorrectly handled certain inputs. A attacker could possibly use this issue to impersonate domains. CVE-2019-12290 It was...

Security Bulletin: Secure Properties In Processes Can Be Revealed (CVE-2019-4168)

Summary IBM UrbanCode Deploy could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. Vulnerability Details CVEID: CVE-2019-4168 DESCRIPTION: IBM UrbanCode Deploy could allow an authenticated user to obtain sensitive information...

CVE-2018-4168

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" component. It allows physically proximate attackers to obtain sensitive information by leveraging the display of cached data on a locked device...

CVE-2018-4168

CVE-2018-4168 concerns the Apple iOS Files Widget. Affected: iOS versions prior to 11.3. Issue: the Files Widget could display cached data while the device was locked, enabling a physically proximate attacker with access to the screen to see sensitive information. Root cause (per Apple documentat...

CVE-2017-4168

This CVE-2017-4168 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4168

Cross-site scripting XSS vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4168

CVE-2016-4168 affects Adobe Experience Manager 5.6.1, 6.0, and 6.1. It is a Cross-site scripting (XSS) vulnerability where remote attackers can inject arbitrary script/HTML via unspecified vectors. The issue is tied to input validation in the affected AEM components (exact vulnerable component/fi...

DLA-348-1 smokeping - security update

Bulletin has no description...

Fedora 20 : iodine-0.7.0-1.fc20 (2014-9265)

Update to 0.7.0 to fix CVE-2014-4168 iodine: authentication bypass vulnerability bz1110339, bz1110338 bz1110340, bz1110341, bz1110342. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

Fedora Update for iodine FEDORA-2014-9279

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for iodine FEDORA-2014-9265

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : iodine (MDVSA-2014:128)

Updated iodine packages fix security vulnerability : Oscar Reparaz discovered an authentication bypass vulnerability in iodine, a tool for tunneling IPv4 data through a DNS server. A remote attacker could provoke a server to accept the rest of the setup or also network traffic by exploiting this...