58 matches found
CVE-2021-4320
Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...
CVE-2021-4320
CVE-2021-4320 affects Blink in Google Chrome and was due to ause-after-free in Blink. The vulnerability exists in Chrome versions prior to 92.0.4515.107, enabling a remote attacker who has compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Multiple connected...
CVE-2021-4320
Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...
CVE-2022-4320
CVE-2022-4320 affects the WordPress Events Calendar plugin prior to version 1.4.5. The issue is improper sanitization/escaping of a parameter, allowing Reflected XSS that can affect both unauthenticated and authenticated users (including admins). Proof-of-concept details and PoCs are available in...
CVE-2022-4320 WordPress Events Calendar Plugin < 1.4.5 - Multiple Reflected XSS
The WordPress Events Calendar WordPress plugin before 1.4.5 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users such as high-privilege ones like admin...
Security Bulletin: Multiple IBM MQ Vulnerabilities Affect IBM Control Center
Summary Multiple IBM MQ vulnerabilities affect IBM Control Center. See vulnerability details for descriptions. Vulnerability Details CVEID: CVE-2020-4320 DESCRIPTION: IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the...
CVE-2020-24056
A hardcoded credentials vulnerability exists in Verint 5620PTZ VerintFW042, Verint 4320 V4320FW023, V4320FW031, and Verint S5120FD VerintFW042units. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols...
Hardcoded credentials
A hardcoded credentials vulnerability exists in Verint 5620PTZ VerintFW042, Verint 4320 V4320FW023, V4320FW031, and Verint S5120FD VerintFW042units. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols...
Stack overflow
Verint 5620PTZ VerintFW042 and Verint 4320 V4320FW023, and V4320FW031 units feature an autodiscovery service implemented in the binary executable '/usr/sbin/DM' that listens on port TCP 6666. The service is vulnerable to a stack buffer overflow. It is worth noting that this service does not requi...
CVE-2020-24055
The CVE-2020-24055 entry applies to Verint 5620PTZ and Verint V4320 series (Firmwares: Verint_FW_0_42, V4320_FW_0_23, V4320_FW_0_31). An autodiscovery service in /usr/sbin/DM listens on TCP port 6666 and is vulnerable to a stack-based buffer overflow. The service requires no authentication, enabl...
CVE-2020-24055
Verint 5620PTZ VerintFW042 and Verint 4320 V4320FW023, and V4320FW031 units feature an autodiscovery service implemented in the binary executable '/usr/sbin/DM' that listens on port TCP 6666. The service is vulnerable to a stack buffer overflow. It is worth noting that this service does not requi...
Security Bulletin: IBM MQ AMQP channels fail to block connections restricted by SSLPEER setting (CVE-2020-4320)
Summary An error was found within the SSLPEER logic within a AMQP channel which meant that it would not block/allow certificates as expected. Vulnerability Details CVEID: CVE-2020-4320 DESCRIPTION: IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block ...
CVE-2020-4320
CVE-2020-4320 affects IBM MQ Appliance and IBM MQ AMQP Channels (versions 8.0, 9.0 LTS, 9.1 LTS, 9.1 CD) due to improper handling of SSLPEER certificate DN; could allow connections based on certificate name. IBM Bulletins detail fixes: IBM MQ Appliance v8 fixpack 8.0.0.15, v9.1 LTS fixpack 9.1.0....
Security Bulletin: IBM MQ AMQP channels fail to block connections restricted by SSLPEER setting (CVE-2020-4320)
Summary An error was found within the SSLPEER logic within a AMQP channel that meant it would not block/allow certificates as expected. Vulnerability Details CVEID: CVE-2020-4320 DESCRIPTION: IBM MQ Appliance, IBM MQ, AMQP Channels do not correctly block or allow clients based on the certificate...
Ubuntu: Security Advisory (USN-4320-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4320-1 : asterisk - security update
Multiple vulnerabilities have been discovered in Asterisk, an open source PBX and telephony toolkit, which may result in denial of service or information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...
CVE-2017-4320
This CVE entry is rejected/not used; it does not represent an active vulnerability.
CVE-2016-4320
CVE-2016-4320 affects Atlassian Bitbucket Server prior to 4.7.1. A directory traversal in the pull requests resource allows remote attackers to read the first line of an arbitrary file, leaking partial confidentiality. The issue is triggered via a directory traversal path and is limited to the fi...
CVE-2015-4320
The CVE-2015-4320 entry affects Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2, specifically the Configuration Log File component. Root cause: sensitive information is written into certain log files, enabling an authenticated, remote attacker to read logs and obtain sensiti...