CVE-2023-4176

CVE-2023-4176 affects SourceCodester Hospital Management System 1.0, specifically the unknown part of appointmentapproval.php. The vulnerability arises from manipulating the time parameter, leading to SQL injection. Multiple connected documents confirm remote exploitation and public disclosure of...

Moderate: Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Security fix for the ALT Linux 10 package yandex-browser-stable version 23.1.2.1033-alt1

23.1.2.1033-alt1 built April 4, 2023 Yandex Browser Team in task 317282 March 20, 2023 Yandex Browser Team - browser updated to 23.1.2 + High CVE-2022-4436: Use after free in Blink Media. + High CVE-2022-4437: Use after free in Mojo IPC. + High CVE-2022-4438: Use after free in Blink Frames. + Hig...

SUSE CVE-2016-4176

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service stack memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4177...

Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the new 108 branch with the 108.0.5359.94 release, fixing many bugs and 29 vulnerabilities, together with 107.0.5304.121 and 108.0.5359.71. Some of the security fixes are - CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao...

Google Chrome Security Update (stable-channel-update-for-desktop_29-2022-11) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2022-4176

Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. Chromium security severity: High...

CVE-2022-4176

Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. Chromium security severity: High...

CVE-2022-4176

CVE-2022-4176 refers to an out-of-bounds write in Lacros Graphics for Google Chrome on Chrome OS and Lacros builds prior to 108.0.5359.71. The issue could enable heap corruption via user-driven UI interactions, with the Chrome/Chromium advisory cycle noting a high severity and remote-exploitation...

CVE-2022-4176

Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. Chromium security severity: High...

CVE-2022-4176

Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. Chromium security severity: High...

CVE-2021-4176

creationtimestamp| type| source ---|---|--- 2021-12-29 18:32:28+00:00| seen| https://t.me/cibsecurity/34740...

CVE-2021-4176

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4176

CVE-2021-4176 affects livehelperchat and is described across multiple sources as a Cross-site Scripting (XSS) vulnerability caused by Improper Neutralization of Input During Web Page Generation. The connected documents confirm the issue but do not provide concrete affected versions, vendor-specif...

CVE-2021-4176 Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

RHEL 7 : qemu-kvm-rhev (RHSA-2020:4176)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4176 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the...

CVE-2013-4176

CVE-2013-4176 affects mysecureshell 1.31, described as a Local Information Disclosure vulnerability. The available documents confirm the affected software and vulnerability class, with intended impact on confidentiality (PARTIAL) per CVSS (v2 vector: LOCAL, LOW; v3: LOCAL, MEDIUM with C:H). The r...

CVE-2013-4176

mysecureshell 1.31: Local Information Disclosure Vulnerability...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1471)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : GNU cpio vulnerability (USN-4176-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4176-1 advisory. Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege escalation. Tenable...