86 matches found
CVE-2022-4178
creationtimestamp| type| source ---|---|--- 2022-12-31 23:33:58+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7459 2023-01-02 19:24:08+00:00| published-proof-of-concept| https://t.me/crackcodes/2063...
Moderate: Red Hat Security Advisory: Red Hat support for Spring Boot 2.7.2 update
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat support for Spring Boot provides an application platform that reduces the complexity of developing and operating applications monoliths and microservices for OpenShift as a containerized platform. This release of Red H...
Updated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to the new 108 branch with the 108.0.5359.94 release, fixing many bugs and 29 vulnerabilities, together with 107.0.5304.121 and 108.0.5359.71. Some of the security fixes are - CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao...
Chromium: CVE-2022-4178 Use after free in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2022-4178
Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2022-4178
Summary of CVE-2022-4178 : A use-after-free in Mojo within Google Chrome before 108.0.5359.71 allows a remote attacker who has compromised the renderer process to potentially cause heap corruption via a crafted HTML page. The vulnerability affects the Mojo IPC path used by Chromeās rendering comp...
CVE-2022-4178
Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2021-4178
creationtimestamp| type| source ---|---|--- 2022-08-24 20:22:59+00:00| seen| https://t.me/cibsecurity/48665 2025-08-19 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrspzggt22m...
CVE-2021-4178
A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML...
CVE-2021-4178
A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML...
CVE-2021-4178
CVE-2021-4178 affects the Fabric8 Kubernetes client (versions 5.0.0-beta-1 and newer) due to unsafe YAML parsing in unmarshalYaml, enabling local, privileged code execution via a crafted YAML payload. The issue is confirmed across multiple sources (NVD/NVD-derived entry and Red Hat/Jenkins adviso...
Security Bulletin: IBM Event Streams is vulnerable to arbitrary code execution due to the Fabric8 Kubernetes client (CVE-2021-4178)
Summary There is a vulnerability in the Fabric8 Kubernetes client. The library is used by IBM Event Streams. Vulnerability Details CVEID:CVE-2021-4178 DESCRIPTION: Fabric8 Kubernetes client could allow a local authenticated attacker to execute arbitrary code on the system, caused by an unsafe...
Moderate: Red Hat Security Advisory: Red Hat build of Quarkus 2.2.5 release and security update
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more information...
CVE-2021-4178
A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML...
CVE-2010-4178
CVE-2010-4178 concerns a local information-disclosure in MySQL-GUI-tools (mysql-administrator): passwords are leaked into the process list when launching the MySQL text console. Multiple connected entries (SU SE, NVD, Ubuntu, CNVD, CNVD-like records) describe the vulnerability as a local informat...
CVE-2010-4178
MySQL-GUI-tools mysql-administrator leaks passwords into process list after with launch of mysql text console...
Security Bulletin: A security vulnerability has been addressed in IBM Cognos Analytics (CVE-2019-4178)
Summary This bulletin addresses a security vulnerability that has been fixed in IBM Cognos Analytics 11.0.13 FP1 as well as 11.0.9-11.0.12 Interim Fixes. IBM Cognos Analytics could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL reques...
CVE-2019-4178
IBM Cognos Analytics 11.x could allow a remote attacker to traverse directories by sending a specially crafted URL, enabling writing or viewing arbitrary files. Affected versions: 11.0.8.0 to 11.0.13.0. Remediation: upgrade to IBM Cognos Analytics 11.0.13 Fix Pack 1 or apply the listed interim fi...
CVE-2018-4178
CVE-2018-4178 describes a permissions issue in macOS where the system incorrectly granted execute permission, stemming from a DesktopServices permission validation flaw. Affected are macOS High Sierra prior to 10.13.4. The root cause is an improper permission grant that could enable a local attac...
CVE-2018-4178
A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue affected versions prior to macOS High Sierra 10.13.4...