82 matches found
Cisco Nexus 9000 Series Resource Exhaustion Denial of Service (CVE-2015-4301)
Cisco NX-OS on Nexus 9000 devices 11.11c allows remote authenticated users to cause a denial of service device hang via large files that are copied to a device's filesystem, aka Bug ID CSCuu77225. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...
SUSE CVE-2009-4301
mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions...
SUSE CVE-2012-4301
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous informatio...
CVE-2022-4301
The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
CVE-2022-4301
CVE-2022-4301 affects the Sunshine Photo Cart WordPress plugin prior to 2.9.15. The vulnerability is a reflected cross-site scripting flaw caused by failing to sanitize and escape a parameter before it is output on the page. The issue is documented in multiple sources (NVD/Nuclei template, RH Red...
CVE-2021-4301
The CVE-2021-4301 entry affects slackero phpwcms (versions up to 1.9.26). The root cause is SQL injection triggered by manipulating the PHP variable phpwcms['db_prepend']. Impact is SQL injection with remote attack potential on affected installations. A fix is available in phpwcms 1.9.27, with th...
SUSE: Security Advisory (SUSE-SU-2022:4301-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4301
creationtimestamp| type| source ---|---|--- 2022-09-01 22:38:24+00:00| seen| https://t.me/cibsecurity/49181...
CVE-2020-4301
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 are affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2020-4301). The IBM bulletin confirms CSRF as the underlying issue and notes that fixes have been applied in later releases: 11.2.3 for the 11.2 line and FP5 for 11.1.7. Affected...
Mageia: Security Advisory (MGASA-2016-0239)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2013-0276)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4301-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4301-1 advisory. It was discovered that the KVM implementation in the Linux kernel, when paravirtual TLB flushes are enabled in guests, the hypervisor in some situations...
Ubuntu: Security Advisory (USN-4301-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4301
BigFix Self-Service Application SSA is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4301)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4301 advisory. - mnt: Prevent pivotroot from creating a loop in the mount tree Eric W. Biederman Orabug: 26575709 CVE-2014-7970 CVE-2014-7970 - vfs: more mntparen...
Debian DSA-4301-1 : mediawiki - security update
Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which result in incorrectly configured rate limits, information disclosure in Special:Redirect/logid and bypass of an account lock. C Tenable Network Security, Inc. The descriptive text a...
Apple Smart Card Services Memory Corruption Vulnerability
Attackers with local access can exploit security issues in the smartcard driver. These result in memory corruptions, which might lead to code execution. Since smartcards can be used for authentication, the vulnerabilities may allow an attacker to login to the system without valid credentials as a...
Photon OS 1.0: Binutils / Libarchive / Ntp PHSA-2017-0010 (deprecated)
An update of binutils,ntp,libarchive packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0010. The text itself is copyright C VMwar...
