61 matches found
CVE-2022-4239 Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR
The Workreap WordPress theme before 2.6.4 does not verify that an addon service belongs to the user issuing the request, or indeed that it is an addon service, when processing the workreapaddonsserviceremove action, allowing any user to delete any post by knowing or guessing the id...
Security Bulletin: Potential information disclosure vulnerability in IBM Tivoli Netcool Impact (CVE-2020-4239)
Summary There is a potential information disclosure vulnerability in IBM Tivoli Netcool Impact. Vulnerability Details CVEID: CVE-2020-4239 DESCRIPTION: IBM Tivoli Netcool Impact could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in th...
Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-4239-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4239-1 advisory. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This...
CVE-2010-4239
creationtimestamp| type| source ---|---|--- 2019-10-28 17:26:37+00:00| seen| https://t.me/cibsecurity/7699 2024-01-29 10:11:51+00:00| seen| https://t.me/ctinow/175138...
CVE-2010-4239
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...
CVE-2010-4239
Tiki Wiki CMS Groupware 5.2 is affected by a Local File Inclusion (LFI) vulnerability (CVE-2010-4239). The Nuclei template confirms the issue in Tiki Wiki CMS Groupware 5.2, describing how an LFI flaw can lead to unauthorized access to sensitive files. Impact is stated as exposing sensitive infor...
CVE-2019-4239
Summary: CVE-2019-4239 affects IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0–3.0.1). Affected systems store user credentials in plain text read-able by a local user. Impact (as stated): Local attacker could access plaintext credentials stored by the Cloud Pak deployment. Public metadata and ...
Debian DSA-4239-1 : gosa - security update
Fabian Henneke discovered a cross-site scripting vulnerability in the password change form of GOsa, a web-based LDAP administration program. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4239. The text itse...
CVE-2018-4239
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image...
CVE-2018-4239
CVE-2018-4239 concerns the Magnifier component in iOS prior to 11.4. A local, physically proximate attacker could view the last image used in Magnifier from the lock screen due to a permissions issue. Apple’s security content for iOS 11.4 notes this was addressed by adding/strengthening permissio...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt64
3:11-alt64 built July 20, 2016 Sergey V Turchin in task 167192 July 20, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,...
openSUSE Security Update : flash-player (openSUSE-2016-866)
Adobe Flash Player was updated to 11.2.202.632 to fix many security issues tracked under the upstream advisory APSB16-25, allowing remote attackers to execute arbitrary code when delivering specially crafted Flash content. The following vulnerabilities were fixed : - CVE-2016-4172: memory...
Critical: Red Hat Security Advisory: flash-plugin security update
An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...
Memory corruption
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
Memory corruption
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
Memory corruption
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
Memory corruption
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
Memory corruption
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
UBUNTU-CVE-2016-4239
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...