CVE-2022-4213

The CVE-2022-4213 entry affects the WordPress plugin Chained Quiz. A Reflected Cross-Site Scripting vulnerability exists via the dn parameter on the chainedquiz_list page, caused by insufficient input sanitization and output escaping. Affected versions are up to 1.3.2.2; some sources indicate a f...

CVE-2021-4213

CVE-2021-4213 is a memory-leak flaw in JSS (and related PKI components like pki-core/jss) that can cause server memory to gradually exhaust RAM, enabling a denial-of-service via out-of-memory conditions. Publicly documented in multiple advisories and Nessus detections across distros (Alibaba Clou...

Oracle Linux 8 : pki-core:10.6 (ELSA-2022-1851)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1851 advisory. - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM rhel-8 Tenable has extracted the preceding description block directl...

AlmaLinux 8 : pki-core:10.6 (ALSA-2022:1851)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:1851 advisory. JSS: memory leak in TLS connection leads to OOM CVE-2021-4213 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...

RHEL 8 : pki-core:10.6 (RHSA-2022:1851)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1851 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: JSS: memory leak in TLS...

Moderate: Red Hat Security Advisory: pki-core:10.6 security and bug fix update

An update for the pki-core:10.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ALSA-2022:1851 Moderate: pki-core:10.6 security and bug fix update

The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: JSS: memory leak in TLS connection leads to OOM CVE-2021-4213 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

Moderate: pki-core:10.6 security and bug fix update

The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: JSS: memory leak in TLS connection leads to OOM CVE-2021-4213 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

CentOS 8 : pki-core:10.6 (CESA-2022:1851)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1851 advisory. - JSS: memory leak in TLS connection leads to OOM CVE-2021-4213 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Oracle Linux 8 : php:7.4 (ELSA-2021-4213)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4213 advisory. libzip php 7.4.19-1 - rebase to 7.4.19 1944110 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

RHEL 8 : php:7.4 (RHSA-2021:4213)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4213 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later...

CentOS 8 : php:7.4 (CESA-2021:4213)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4213 advisory. - php: Use of freed hash key in the pharparsezipfile function CVE-2020-7068 - php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV...

SUSE: Security Advisory (SUSE-SU-2012:1592-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4213

The CVE-2020-4213 entry concerns IBM Spectrum Protect Plus (versions 10.1.0 and 10.1.5). The connected Nessus item documents a remote command injection affecting the administrative console: improper validation of user-supplied data during login HTTP requests enables an unauthenticated attacker to...

Security Bulletin: Command injection vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-4210, CVE-2020-4213, CVE-2020-4222, CVE-2020-4212, CVE-2020-4211)

Summary Command injection vulnerabilities in IBM Spectrum Protect Plus could allow a remote attacker to execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2020-4210 DESCRIPTION: IBM Spectrum Protect Plus could allow a remote attacker to execute arbitrary code on the system. By...

Ubuntu 16.04 LTS / 18.04 LTS : Squid vulnerabilities (USN-4213-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4213-1 advisory. Jeriko One and Kristoffer Danielsson discovered that Squid incorrectly handled certain URN requests. A remote attacker could possibly use thi...

Weak Authentication

Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. A flaw was discovered in the way authenticated connections were cached on the server by remote-naming. After a user has successfully logged in, a remote attacker could use a...

openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2019:0081-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-4213

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks...

CVE-2018-4213

The CVE-2018-4213 issue affects multiple Apple platforms: iOS (pre-11.3), Safari (pre-11.1), iCloud for Windows (pre-7.4), tvOS (pre-11.3), watchOS (pre-4.3), and iTunes for Windows (pre-12.7.4). The root cause is an unexpected interaction that could cause an ASSERT failure, addressed by improved...