90 matches found
CVE-2022-4177
Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially exploit heap corruption via a crafted Chrome Extension and UI interaction. Chromium security severity: High...
CVE-2022-4177
CVE-2022-4177 : Use-after-free in Chrome extensions; vulnerable as of Chrome/Chromium before 108.0.5359.71. An attacker who persuades a user to install a crafted extension via UI interaction could exploit heap corruption. The Chrome stable release 108.0.5359.71 and related Chromium fixes address ...
CVE-2018-4177
CVE-2018-4177 is listed in the Apple iOS 11.3 security content as affecting the Apple TV App on iOS 11.3. The vulnerability is described as an input-validation issue that could allow an attacker with a privileged network position to spoof password prompts in the Apple TV App. The Apple document a...
CVE-2021-4177
creationtimestamp| type| source ---|---|--- 2021-12-28 12:24:28+00:00| seen| https://t.me/cibsecurity/34703...
CVE-2021-4177
The CVE-2021-4177 entry relates to livehelperchat and is an information disclosure vulnerability caused by generating error messages that contain sensitive details. Public documents consistently describe the issue as an information leak stemming from error message handling, with no precise affect...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1535)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-4177
mysql-gui-tools mysql-query-browser and mysql-admin before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes...
CVE-2010-4177
mysql-gui-tools mysql-query-browser and mysql-admin before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes...
CVE-2010-4177
mysql-gui-tools mysql-query-browser and mysql-admin before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes...
CVE-2010-4177
CVE-2010-4177 affects mysql-gui-tools (mysql-query-browser and mysql-admin) prior to 5.0r14+openSUSE-2.3. The underlying issue is an information disclosure: the password of a MySQL user connected to the server is exposed in clear text through the list of running processes. This is a local vulnera...
Ubuntu 19.10 : rygel vulnerability (USN-4177-1)
It was discovered that the Rygel package automatically started the daemon by default in user sessions. In certain environments, this resulted in media being shared contrary to expectations. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...
CVE-2019-4177
IBM Cognos Controller 10.2.0–10.4.0 is affected by a vulnerability that allows locally stored web pages to be read by another user on the same system (information disclosure). Affected products/versions: Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.4.0. Remediation: apply the fixed update...
Debian DSA-4177-1 : libsdl2-image - security update
Multiple vulnerabilities have been discovered in the image loading library for Simple DirectMedia Layer 2, which could result in denial of service or the execution of arbitrary code if malformed image files are opened. C Tenable Network Security, Inc. The descriptive text and package checks in th...
Debian: Security Advisory (DSA-4177-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-4177
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt64
3:11-alt64 built July 20, 2016 Sergey V Turchin in task 167192 July 20, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,...
openSUSE Security Update : flash-player (openSUSE-2016-866)
Adobe Flash Player was updated to 11.2.202.632 to fix many security issues tracked under the upstream advisory APSB16-25, allowing remote attackers to execute arbitrary code when delivering specially crafted Flash content. The following vulnerabilities were fixed : - CVE-2016-4172: memory...
Critical: Red Hat Security Advisory: flash-plugin security update
An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2016-4177
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service stack memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4176...