67 matches found
CentOS 7 : firefox (RHSA-2020:4310)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4310 advisory. - Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence o...
Oracle Linux 7 : firefox (ELSA-2020-4310)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4310 advisory. 78.4.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...
RHEL 7 : firefox (RHSA-2020:4310)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4310 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Security Bulletin: IBM MQ is vulnerable to a denial of service attack due to an error within the Data Conversion logic. (CVE-2020-4310)
Summary An issue was found within the data conversion logic that could cause a SIGSEGV and denial of service within an MQ channel process. Vulnerability Details CVEID: CVE-2020-4310 DESCRIPTION: IBM MQ and MQ Appliance is vulnerable to a denial of service attack due to an error within the Data...
Security Bulletin: IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4310
Summary IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4310. Vulnerability Details CVEID: CVE-2020-4310 DESCRIPTION: IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logi...
CVE-2020-4310
Summary of CVE-2020-4310 details from provided documents: IBM MQ and MQ Appliance are vulnerable to a denial-of-service condition due to an error in the Data Conversion logic. The vulnerability affects multiple versions, including IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C...
Ubuntu 18.04 LTS : WebKitGTK+ vulnerability (USN-4310-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4310-1 advisory. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote...
Ubuntu: Security Advisory (USN-4310-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-4310
CVE-2011-4310 corresponds to a vulnerability in the News module of CMS Made Simple (CMSMS) prior to version 1.9.4.3. The issue allows remote attackers to corrupt newly written articles. Affected products: CMSMS, with the News module as the vulnerable component; vulnerable scope is versions earlie...
Cisco Finesse Appliance Multiple Cross-Site Scripting Vulnerabilities (Cisco-SA-20150818-CVE-2015-4310)
According to its self-reported version, the Cisco Finesse appliance is affected by multiple cross-site scripting XSS vulnerabilities exist due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to...
CVE-2019-4310
CVE-2019-4310 affects IBM Security Guardium Big Data Intelligence (SonarG) 4.0. The issue is an inadequate account lockout setting that could allow a remote attacker to brute-force credentials over the network. Components/versions explicitly named: Guardium Big Data Intelligence 4.0 (SonarG). Imp...
Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a Improper Restriction of Excessive Authentication Attempts vulnerability
Summary IBM Security Guardium is aware of the following vulnerability Vulnerability Details CVEID: CVE-2019-4310 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. CVSS...
Omron NJ501-4310 PLC Detection
Binary data 755778.prm...
CVE-2018-4310
CVE-2018-4310 is an Apple vulnerability described as an access issue that was mitigated by adding sandbox restrictions. Public details confirm affected platforms are iOS versions prior to 12.x and macOS Mojave 10.14, with remediation delivered via Apple security updates HT209193/HT209139 and rela...
Debian DSA-4310-1 : firefox-esr - security update
Two security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code inside the sandboxed content process. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...
Debian: Security Advisory (DSA-4310-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apache Struts 2.x < 2.3.15.3 Broken Access Control Vulnerability (S2-018)
The version of Apache Struts running on the remote host is 2.x prior to 2.3.15.3. It, therefore, is affected by a broken access control vulnerability which can be used to bypass security constraints. Note that Nessus has not tested for these issues but has instead relied only on the application's...
Security Bulletin:Sterling Web Channel is affected by Apache Struts 2 security vulnerabilities (CVE-2013-4310, CVE-2013-4316, CVE-2013-2251, CVE-2013-2248, CVE-2013-2135, CVE-2013-2134, CVE-2013-2115, CVE-2013-1966, CVE-2013-1965)
Summary IBM Sterling Web Channel use Apache Struts 2 and is affected by some of the vulnerabilities that exist in Apache Struts 2. Vulnerability Details CVEID: CVE-2013-4310 Description: Apache Struts could allow a remote attacker to bypass security restrictions, caused by an error in the action:...
