78 matches found
CVE-2022-4176
Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. Chromium security severity: High...
CVE-2022-4176
Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. Chromium security severity: High...
CVE-2022-4176
Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. Chromium security severity: High...
CVE-2022-4176
CVE-2022-4176 refers to an out-of-bounds write in Lacros Graphics for Google Chrome on Chrome OS and Lacros builds prior to 108.0.5359.71. The issue could enable heap corruption via user-driven UI interactions, with the Chrome/Chromium advisory cycle noting a high severity and remote-exploitation...
CVE-2022-4176
Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. Chromium security severity: High...
CVE-2021-4176
creationtimestamp| type| source ---|---|--- 2021-12-29 18:32:28+00:00| seen| https://t.me/cibsecurity/34740...
CVE-2021-4176
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4176 Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4176
CVE-2021-4176 affects livehelperchat and is described across multiple sources as a Cross-site Scripting (XSS) vulnerability caused by Improper Neutralization of Input During Web Page Generation. The connected documents confirm the issue but do not provide concrete affected versions, vendor-specif...
RHEL 7 : qemu-kvm-rhev (RHSA-2020:4176)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4176 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the...
CVE-2013-4176
mysecureshell 1.31: Local Information Disclosure Vulnerability...
CVE-2013-4176
CVE-2013-4176 affects mysecureshell 1.31, described as a Local Information Disclosure vulnerability. The available documents confirm the affected software and vulnerability class, with intended impact on confidentiality (PARTIAL) per CVSS (v2 vector: LOCAL, LOW; v3: LOCAL, MEDIUM with C:H). The r...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1471)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS : GNU cpio vulnerability (USN-4176-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4176-1 advisory. Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege escalation. Tenable...
Ubuntu: Security Advisory (USN-4176-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4176
IBM Cognos Controller 10.2.0–10.4.0 is affected by CVE-2019-4176 due to an insecure HTTP Methods handling which could allow a remote attacker to bypass security restrictions and gain access to the system. Affected versions include 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0. The issue is documente...
Debian DSA-4176-1 : mysql-5.5 - security update
Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.60, which includes additional changes. Please see the MySQL 5.5 Release Notes and Oracle's Critical Patch Update advisory for further details : C...
Debian: Security Advisory (DSA-4176-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-4176
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image...
CVE-2018-4176
CVE-2018-4176 affects macOS before 10.13.4 in the Disk Images component. A crafted disk image can trigger the mounting of a directory as a disk image and cause an associated application to launch, potentially enabling arbitrary code execution. The notable root cause is a logic/validation issue in...