143 matches found
Slackware: Security Advisory (SSA:2022-348-03)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:4487-1 Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow bsc1205874 - CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free bsc1205879 - CVE-2022-46344: Server XIChangeProperty out-of-bounds access bsc1205876 - CVE-2022-46343: Server...
SUSE-SU-2022:4484-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow bsc1205874 - CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access bsc1205877 - CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free bsc1205879 - CVE-2022-4634...
CVE-2022-4283
CVE-2022-4283 affects the X.Org X server component handling keyboard name lookups (XkbGetKbdByName/XkbCopyNames). The provided documents link this issue to use-after-free/out-of-bounds conditions in Xkb-related code, potentially enabling local privilege elevation on privileged X servers and remot...
Mageia: Security Advisory (MGASA-2013-0263)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-4283
CVE-2009-4283 entry is rejected/not used; it does not represent an active vulnerability.
CVE-2020-4283
CVE-2020-4283 affects IBM Security Information Queue (ISIQ) versions 1.0.0–1.0.4. The IBM bulletin confirms a hard-coded credential issue: the JWT secret is stored in plain text in a YAML file (as of v1.0.5, an encrypted JWT secret is generated during configuration). The vulnerability enables aut...
Security Bulletin: IBM Security Information Queue contains hard-coded credentials (CVE-2020-4283)
Summary IBM Security Information Queue ISIQ stores the JSON web token JWT secret in plain text in one of its YAML files. As of v1.0.5, ISIQ generates an encrypted JWT secret during product configuration. Vulnerability Details CVEID: CVE-2020-4283 DESCRIPTION: IBM Security Information Queue ISIQ...
Ubuntu 16.04 LTS / 18.04 LTS : QEMU vulnerabilities (USN-4283-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4283-1 advisory. Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that QEMU incorrectly handled iSCSI server responses. A remote attacker in...
CVE-2018-4283
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6...
CVE-2018-4283
CVE-2018-4283 affects macOS High Sierra 10.13.x prior to 10.13.6. An out-of-bounds read in the IOGraphics component could allow a local attacker to disclose kernel memory. Apple attributes the fix to improved input validation in IOGraphics, addressing the memory disclosure. The Red Hat and CVE li...
Debian DSA-4283-1 : ruby-json-jwt - security update
It was discovered that ruby-json-jwt, a Ruby implementation of JSON web tokens performed insufficient validation of GCM auth tags. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4283. The text itself is...
Debian: Security Advisory (DSA-4283-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
macOS 10.13.x < 10.13.6 Multiple Vulnerabilities
The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6. It is, therefore, affected by multiple vulnerabilities. Note that successful exploitation of the most serious issues can result in arbitrary code execution. C Tenable Network Security, Inc...
CVE-2017-4283
This CVE entry is rejected/not used and does not represent an active vulnerability.
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt65
3:11-alt65 built Sept. 22, 2016 Michael Shigorin in task 169622 Sept. 19, 2016 Sergey V Turchin - new version CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283,...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt65
3:11-alt65 built Sept. 20, 2016 Sergey V Turchin in task 169477 Sept. 19, 2016 Sergey V Turchin - new version CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283,...
SUSE SLED12 Security Update : flash-player (SUSE-SU-2016:2312-1)
This update for flash-player fixes the following security issues APSB16-29, boo998589 : - integer overflow vulnerability that could lead to code execution CVE-2016-4287. - use-after-free vulnerabilities that could lead to code execution CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923,...