24social-ui (>=1.0.0, <=1.0.5), 3extensions (1.0.1) +3804 more potentially affected by CVE-2023-4316 via zod (>=3.0.0-alpha.4, <=3.22.2)

zod NPM version =3.0.0-alpha.4, =1.0.0, =0.0.7, =1.0.0, =3.0.0-beta.21, =2.4.0, =1.6.1, =1.0.6, =1.2.4, =0.0.1, =0.1.0, =0.1.23, =0.20.0, =0.0.0-dev-20240828032938, =3.1.0 and more Source cves: CVE-2023-4316 Source advisory: GHSA-M95Q-7QP3-XV42...

CVE-2023-4316

Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...

CVE-2023-4316

CVE-2023-4316 affects Zod versions 3.21.0 through 3.22.3, enabling denial-of-service when validating emails due to inefficient regex handling. Affected software: Zod (JavaScript/TypeScript). Root cause: regex-based email validation can be exploited to exhaust resources. Impact: DoS during email v...

CVE-2023-4316 Zod 3.22.2 - Regular expression Denial of Service

Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...

24social-ui (>=1.0.0, <=1.0.5), 3extensions (1.0.1) +4023 more potentially affected by CVE-2023-4316 via zod (>=1.0.0, <=3.22.2)

zod NPM version =1.0.0, =1.0.0, =0.0.7, =1.0.0, =3.0.0-beta.21, =2.4.0, =1.6.1, =1.0.6, =1.2.4, =0.0.1, =0.1.0, =0.1.23, =0.20.0, =0.20.1 - @abuob/bitbucket-utils 0.0.1 and more Source cves: CVE-2023-4316 Source advisory: MEND:CVE-2023-4316...

CVE-2021-4316

creationtimestamp| type| source ---|---|--- 2023-07-29 07:29:54+00:00| seen| https://t.me/cibsecurity/67398...

CVE-2021-4316

CVE-2021-4316 affects Google Chrome (Cast UI) held in Chromium-based builds. The vulnerability arises from an inappropriate implementation in Cast UI that allowed a remote attacker to spoof the browser UI via a crafted HTML page. The impact is described as spoofing the UI with Low severity (NVD C...

CVE-2021-4316

Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof browser UI via a crafted HTML page. Chromium security severity: Low...

Security Bulletin: IBM SAN Volume Controller and Storwize Family security vulnerabilities (CVE-2013-4310 CVE-2013-4316)

Summary Security Bulletin: IBM SAN Volume Controller and Storwize Family security vulnerabilities CVE-2013-4310 CVE-2013-4316 Vulnerability Details Security Bulletin --- Summary --- Administrative access to the system via the IP interface may be obtained without authentication. Vulnerability...

K16334: Apache Struts vulnerability CVE-2013-4316

Security Advisory Description Description Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors. CVE-2013-4316 Impact None Status To determine if your release is known to be vulnerable, the components or features that are...

org.apache.struts:struts2-assembly (>=2.2.1, <=2.3.15), org.apache.struts:struts2-rest-showcase (>=2.1.2, <=2.3.15.1) +5 more potentially affected by CVE-2013-4316 via org.apache.struts:struts2-rest-plugin (>=2.1.2, <=2.3.15.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-rc2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core 1.0.1 Source cves: CVE-2013-4316 Source advisory: GHSA-J7H6-XR7G-M2C5...

org.apache.struts:struts2-assembly (>=2.2.1, <=2.3.15), org.apache.struts:struts2-rest-showcase (>=2.1.2, <=2.3.15.1) +5 more potentially affected by CVE-2013-4316 via org.apache.struts:struts2-rest-plugin (>=2.1.2, <=2.3.15.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-rc2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core 1.0.1 Source cves: CVE-2013-4316 Source advisory: OSV:GHSA-J7H6-XR7G-M2C5...

Apache Struts Security Update (S2-019)

The remote host is missing a security update for Apache Struts announced via the referenced advisory. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

RHEL 8 : java-11-openjdk (RHSA-2020:4316)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4316 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

CVE-2020-4316

IBM Publishing Engine is affected by CVE-2020-4316 due to not setting the secure attribute on authorization tokens and session cookies. Impact: cookies may be exposed when a user visits an http link or a site embedding it, allowing eavesdropping of cookie values. Affected versions: IBM Publishing...

Security Bulletin: Session cookie is missing secure attribute and affects IBM Publishing Engine

Summary There is a vulnerability in the session cookie which misses a secure attribute and affects IBM Publishing Engine Vulnerability Details CVEID: CVE-2020-4316 DESCRIPTION: IBM Publishing Engine does not set the secure attribute on authorization tokens or session cookies. Attackers may be abl...

Ubuntu: Security Advisory (USN-4316-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-4316

A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4316

CVE-2018-4316 is a WebKit/Safari memory corruption issue that affects iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows. The root cause is memory corruption with improved state management, and the Apple security pages indicate it could allow arbitrary code execution when...

openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2019:0081-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...