130 matches found
CVE-2020-4235
IBM Tivoli Netcool Impact is affected by CVE-2020-4235: cross-site scripting in the Web UI for versions 7.1.0.0 through 7.1.0.17, enabling an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The IBM bulletin specifies remediation by upgrading ...
Security Bulletin: Cross-site scripting vulnerability in IBM Tivoli Netcool Impact (CVE-2020-4235)
Summary There is a cross-site scripting vulnerability in IBM Tivoli Netcool Impact. Vulnerability Details CVEID: CVE-2020-4235 DESCRIPTION: IBM Tivoli Netcool Impact is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri...
Ubuntu 16.04 LTS / 18.04 LTS : nginx vulnerability (USN-4235-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4235-1 advisory. Bert JW Regeer and Francisco Oca Gonzalez discovered that nginx incorrectly handled certain errorpage configurations. A remote attacker could possibly...
Ubuntu: Security Advisory (USN-4235-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-4235
creationtimestamp| type| source ---|---|--- 2019-12-03 18:32:11+00:00| seen| https://t.me/cibsecurity/8469...
CVE-2013-4235
shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2013-4235
shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2013-4235
shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2013-4235
CVE-2013-4235 refers to a shadow-utils TOCTOU (time-of-check-time-of-use) race condition when copying and removing directory trees. The Connected IBM X-Force bulletin lists this CVE with CWE-367, a base score of 3.7, CVSS vector (AV:L/AC:H/Au:N/C:P/I:P/A:P). The Initial description notes the race...
CVE-2013-4235
shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2019-4235
The CVE-2019-4235 entry affects IBM PureApplication System versions 2.2.3.0–2.2.5.3, where default password requirements are not enforced, enabling potential account compromise. The issue is rooted in weak password policy by default. IBM’s remediation is to upgrade to IBM PureApplication System v...
Debian: Security Advisory (DSA-4235-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-4235
CVE-2018-4235 is an injection-related issue in Apple’s Messages component that enables a local impersonation attack. It affects iOS 11.4, macOS 10.13.5, tvOS 11.4, and watchOS 4.3.1, as noted across Apple security updates. Root cause is an injection vulnerability in Messages handling that allows ...
Apple Mac OS X Security Updates (HT208849)-01
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
About the security content of tvOS 11.4
About the security content of tvOS 11.4 This document describes the security content of tvOS 11.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2017-4235
CVE-2017-4235 entry is rejected and not used per description.
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUScheduleSet Get method requests. The issue results...
CVE-2017-17424
CVE-2017-17424 affects Quest NetVault Backup, specifically vulnerable in the NVBUScheduleSet Get method handling. The issue is a SQL injection due to improper validation of a user-supplied string used to construct SQL queries, allowing remote attackers to execute arbitrary code in the context of ...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt64
3:11-alt64 built July 20, 2016 Sergey V Turchin in task 167192 July 20, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,...