104 matches found
CVE-2023-4215
Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials...
CVE-2023-4215
Advantech WebAccess 9.1.3 is affected by CVE-2023-4215, an information-disclosure vulnerability that could leak user credentials via the Cloud Agent Debug service when configuring or modifying account information. The vulnerability is documented across multiple sources (NVD/NVD-ICS, CISA ICS advi...
Advantech WebAccess
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Advantech Equipment : WebAccess Vulnerability : Debug Messages Revealing Unnecessary Information 2. RISK EVALUATION Successful exploitation of this vulnerability could leak user credentials...
RHEL 7 : kpatch-patch (RHSA-2023:4215)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4215 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fixe...
CVE-2022-4215
creationtimestamp| type| source ---|---|--- 2022-12-03 00:50:22+00:00| seen| https://t.me/cibsecurity/53900...
CVE-2022-4215
The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date' parameter on the 'chainedquizlist' page in versions up to, and including, 1.3.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...
CVE-2022-4215
The CVE-2022-4215 entry concerns the Chained Quiz WordPress plugin with a Reflected Cross-Site Scripting vulnerability via the date parameter on the chainedquiz_list page, affecting versions up to and including 1.3.2.3. The vulnerability stems from insufficient input sanitization and output escap...
CVE-2021-4215
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2021-4215
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2021-4215
CVE-2021-4215 is rejected/not used; withdrawn by CNA, not a security issue.
SUSE: Security Advisory (SUSE-SU-2012:1592-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Clickjacking vulnerability in IBM Operations Analytics - Log Analysis (CVE-2019-4215)
Summary There is a clickjacking vulnerability in IBM Operations Analytics - Log Analysis Vulnerability Details CVEID: CVE-2019-4215 DESCRIPTION: CVSS Base score: 6.1 CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/159186 for the current score. CVSS Vector:...
CVE-2019-4215
CVE-2019-4215 affects IBM Operations Analytics - Log Analysis versions 1.3.1 through 1.3.5 and is a clickjacking vulnerability. The IBM Security Bulletin details a vulnerability in Log Analysis that could allow a remote attacker to hijack the victim’s click actions by persuading them to visit a m...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4215)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4215 advisory. - x86/speculation/l1tf: Fix overflow in l1tfpfnlimit on 32bit Vlastimil Babka Orabug: 28505476 CVE-2018-3620 - x86/speculation/l1tf: Protect PAE swap entrie...
CVE-2018-4215
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted app...
CVE-2018-4215
CVE-2018-4215 is an Apple iOS 11.4-generation Bluetooth vulnerability. The issue affects iOS before 11.4, in the Bluetooth component, enabling a crafted app to gain privileges or cause a denial of service via a buffer overflow. Root cause is described as a memory/size-validation insufficiency in ...
Debian DSA-4215-1 : batik - security update
Man Yue Mo, Lars Krapf and Pierre Ernst discovered that Batik, a toolkit for processing SVG images, did not properly validate its input. This would allow an attacker to cause a denial-of-service, mount cross-site scripting attacks, or access restricted files on the server. C Tenable Network...