94 matches found
CVE-2023-4335
The CVE-2023-4335 issue affects the Broadcom RAID Controller Web server (nginx) on Linux, where private server-side files are served without authentication due to a flaw in access control. Impact is exposure of confidential information; CVSS base score 7.5 (HIGH) with network attack vector and no...
WordPress Fancy Product Designer Plugin <= 4.6.9 is vulnerable to Broken Access Control
Software Fancy Product Designer Type Plugin Vulnerable versions = 4.6.9 Fixed in 4.7.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2021-4335 Patch priority High CVSS severity High 6.3 Developer Claim ownership PSID b0afa15cabbe Credits Ramuel Gall Required...
Debian: Security Advisory (DSA-1181-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-4335
A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host...
CVE-2022-4335
Removed by vendor...
CVE-2022-4335
A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host...
CVE-2022-4335
GitLab EE is affected by a blind SSRF vulnerability (CVE-2022-4335) in all versions prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1, which allows an attacker to connect to a local host. The issue is classified with CVSSv3.1 base score 4.3 (Network, Low confidentiality impact, Low ...
CVE-2022-4335
A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host...
Mageia: Security Advisory (MGASA-2015-0244)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4335-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS : Thunderbird vulnerabilities (USN-4335-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4335-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an...
CVE-2013-4335
The CVE-2013-4335 entry affects opOpenSocialPlugin versions 0.8.2.1 and later up to 1.2.6 (including > 0.9.9.2, 0.9.13). The vulnerability is described as Multiple XML External Entity (XXE) Injection vulnerabilities. Public sources in the connected documents (NVD, Red Hat advisory) indicate hi...
CVE-2019-4335
IBM Watson Studio Local 1.2.3 stores key files in the user’s home directory, which could be obtained by another local user. Root cause: insecure storage location leads to potential key exposure. Impact: confidentiality could be HIGH; access is LOCAL, no user interaction required. No exploitation ...
CVE-2018-4335
CVE-2018-4335 affects Apple iOS where the IOMobileFrameBuffer component had a validation issue that allowed reading restricted memory. The root cause is an input/validation defect that was fixed by improved input sanitization. Affected products/versions: iOS versions before 12.0 (iPhone/iPad/touc...
CVE-2018-4335
A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12...
Debian DSA-4335-1 : nginx - security update
Three vulnerabilities were discovered in Nginx, a high-performance web and reverse proxy server, which could result in denial of service in processing HTTP/2 via excessive memory/CPU usage or server memory disclosure in the ngxhttpmp4module module used for server-side MP4 streaming. C Tenable...
Debian: Security Advisory (DSA-4335-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerabilities in redis affect PowerKVM (CVE-2015-4335, CVE-2013-7458)
Summary PowerKVM is affected by vulnerabilities in redis. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-4335 DESCRIPTION: Redis could allow a remote attacker to bypass security restrictions, caused by the insecure loading of Lua bytcode by the loadstring...
Pivotal Software Redis < 2.8.21 / 3.x < 3.0.2 RCE
The version of Redis installed on the remote host is affected by a remote code execution vulnerability. An attacker can exploit this issue via the eval command to execute arbitrary Lua bytecote. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...