CVE-2022-4228

A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affects an unknown part of the file /bsmsci/index.php/user/edituser/. The manipulation of the argument password leads to information disclosure. It is possible to initiate the attack...

CVE-2022-4228

CVE-2022-4228 affects SourceCodester Book Store Management System 1.0, specifically the endpoint at /bsms_ci/index.php/user/edit_user/ where manipulating the password parameter leads to information disclosure. The flaw is exploitable remotely and the public disclosure of exploits is noted. Eviden...

CVE-2022-4228 SourceCodester Book Store Management System information disclosure

A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affects an unknown part of the file /bsmsci/index.php/user/edituser/. The manipulation of the argument password leads to information disclosure. It is possible to initiate the attack...

CVE-2021-4228

CVE-2021-4228 affects Lanner Inc IAC-AST2500A standard firmware version 1.00.0. The root cause is the default use of a hard-coded TLS certificate, enabling MITM attacks even over HTTPS. Documents consistently describe this issue for the IAC-AST2500A firmware and reference updated firmware to addr...

CVE-2021-4228 Hard-coded TLS Certificate

Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle MitM attacks even in the presence of the HTTPS connection. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.00.0...

Ubuntu: Security Advisory (USN-4228-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4228

creationtimestamp| type| source ---|---|--- 2020-02-18 22:36:22+00:00| seen| https://t.me/cibsecurity/9908...

PT-2019-4228

Name of the Vulnerable Software and Affected Versions Microsoft Windows AppX Deployment Server affected versions not specified Description The issue is related to insufficient access restrictions in the Windows AppX Deployment Server component, allowing an attacker to elevate their privileges. To...

Debian DSA-4228-1 : spip - security update

Several vulnerabilities were found in SPIP, a website engine for publishing, resulting in cross-site scripting and PHP injection. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4228. The text itself is...

CVE-2018-4228

The CVE-2018-4228 entry concerns macOS pre-10.13.5 and the IOFireWireAVC component. The vulnerability is described as a race condition that could allow a crafted app to execute arbitrary code with kernel privileges, i.e., a local escalation in a privileged context. Connected sources corroborate t...

Apple Mac OS X Security Updates (HT208849)-01

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-4228

...

CVE-2017-4228

CVE-2017-4228 is rejected and not used as an active vulnerability entry.

CVE-2017-17417

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Acknowledge method requests. The issue...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Acknowledge method requests. The issue...

CVE-2017-17417

Quest NetVault Backup Server (Quest NetVault Backup) is affected by CVE-2017-17417 due to an SQL Injection in the Process Manager Service NVBUPhaseStatus Acknowledge handling. Affects versions prior to 11.4.5 (e.g., 11.3.0.12 referenced in sources). The vulnerability allows unauthenticated remote...

CVE-2016-4228

creationtimestamp| type| source ---|---|--- 2016-08-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40309 2025-08-31 03:01:29+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt64

3:11-alt64 built July 20, 2016 Sergey V Turchin in task 167192 July 20, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,...

openSUSE Security Update : flash-player (openSUSE-2016-866)

Adobe Flash Player was updated to 11.2.202.632 to fix many security issues tracked under the upstream advisory APSB16-25, allowing remote attackers to execute arbitrary code when delivering specially crafted Flash content. The following vulnerabilities were fixed : - CVE-2016-4172: memory...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...