112 matches found
CVE-2021-4187
vim is vulnerable to Use After Free...
Mozilla Firefox Security Advisory (MFSA2012-86) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CentOS 7 : spice and spice-gtk (RHSA-2020:4187)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4187 advisory. - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPI...
Security Bulletin: IBM Security Guardium is affected by a Left over debug code in js files vulnerability
Summary IBM Security Guardium has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2020-4187 DESCRIPTION: IBM Security Guardium could disclose sensitive information on the login page that could aid in further attacks against the system. CVSS Base score: 5.3 CVSS Temporal...
Oracle Linux 7 : spice / and / spice-gtk (ELSA-2020-4187)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4187 advisory. - Fix multiple buffer overflows in QUIC decoding code Resolves: CVE-2020-14355 spice-gtk Tenable has extracted the preceding description block directly from the...
CVE-2020-4187
CVE-2020-4187 affects IBM Security Guardium 10.5, 10.6, 11.0, and 11.1. The IBM bulletin describes a vulnerability where login-page information disclosure could aid further attacks on the system. The CVSS base score is 5.3 (MEDIUM) with impact on confidentiality (LOW) and no impact on integrity/a...
CVE-2013-4187
The CVE-2013-4187 entry concerns the Drupal Flippy module (7.x-1.x) prior to 7.x-1.2, where access restrictions for nodes are not properly enforced. This allows remote authenticated users with content-access permissions to read a link or alias to a restricted node, effectively bypassing node visi...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4187. Reason: This candidate is a duplicate of CVE-2013-4187. Notes: All CVE users should reference CVE-2013-4187 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2013-4224
The vulnerability tracked as CVE-2013-4187 (CVE-2013-4224 is a duplicate) affects the Flippy module for Drupal 7.x-1.x prior to 7.x-1.2. The module does not properly restrict access to nodes when generating previous/next links, permitting remote authenticated users with the permission to access c...
Use-After-Free
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Bypass Policy
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
CVE-2018-4187
An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to spoof the UI via a crafted URL in a text message...
CVE-2018-4187
CVE-2018-4187 affects Apple’s LinkPresentation component in iOS < 11.3.1 and macOS
About the security content of tvOS 11.4
About the security content of tvOS 11.4 This document describes the security content of tvOS 11.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of Security Update 2018-001 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Debian DSA-4187-1 : linux - security update (Spectre)
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2015-9016 Ming Lei reported a race condition in the multiqueue block layer blk-mq. On a system with a driver using blk-mq mtip32xx, nullblk, or...
About the security content of Security Update 2018-001
About the security content of Security Update 2018-001 This document describes the security content of Security Update 2018-001. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
About the security content of iOS 11.3.1
About the security content of iOS 11.3.1 This document describes the security content of iOS 11.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
