CVE-2023-4364

Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4364

Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4364

CVE-2023-4364 describes an insecure implementation in Chrome’s Permission Prompts prior to 116.0.5845.96, allowing a crafted HTML page to obfuscate security UI. The issue affects Google Chrome (Chromium) and stems from an inappropriate implementation in Permission Prompts, with a Medium severity ...

Stable Channel Update for Desktop

The Stable and Extended stable channels has been updated to 116.0.5845.96 for Mac and Linux and 116.0.5845.96/.97 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and...

CVE-2021-4364

CVE-2021-4364 involves the WordPress plugin JobSearch WP Job Board . The vulnerability is an authorization bypass caused by a missing capability check in the function jobsearch_add_job_import_schedule_call() , affecting versions up to and including 1.8.1. This allows authenticated attackers to ad...

CVE-2021-4364 JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearchaddjobimportschedulecall function in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers to add and/or modify schedule calls...

CVE-2022-4364

creationtimestamp| type| source ---|---|--- 2022-12-08 18:17:46+00:00| seen| https://t.me/cibsecurity/54169...

CVE-2022-4364

The CVE-2022-4364 issue affects Teledyne FLIR AX8 devices with Web Service Handler, where manipulation of the palette.php palette parameter in an unknown function enables remote command injection. This vulnerability is exploitable over the network without authentication, and public proof-of-conce...

Oracle Linux 8 : binutils (ELSA-2021-4364)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4364 advisory. 2.30-108.0.2 - Forward-port the following update: 2.30-93.0.4 - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps - Backport test...

RHEL 8 : binutils (RHSA-2021:4364)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4364 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includ...

CentOS 8 : binutils (CESA-2021:4364)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4364 advisory. - binutils: Race window allows users to own arbitrary files CVE-2021-20197 - binutils: Heap-based buffer overflow in bfdgetlsigned32 in libbfd.c becaus...

Ubuntu: Security Advisory (USN-4364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-4364

CVE-2019-4364 affects IBM Maximo Asset Management core product 7.6. The vulnerability is CSV injection that could allow a remote authenticated attacker to execute arbitrary commands on the system. Remediation is provided by IBM Fix Central; affected 7.6 versions include 7.6.1.1 FP, 7.6.0.10 iFix,...

Debian DSA-4364-1 : ruby-loofah - security update

It was discovered that ruby-loofah, a general library for manipulating and transforming HTML/XML documents and fragments, performed insufficient sanitising of SVG elements. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

CVE-2017-4364

CVE-2017-4364 entry is rejected/not used and does not represent an active vulnerability.

CVE-2013-4364

The provided documents identify CVE-2013-4364 as a local-privilege issue in Red Hat OpenShift Enterprise (1/2) affecting oo-analytics-export and oo-analytics-import within the openshift-origin-broker-util package. The root cause is described as a symlink attack on an unspecified file in /tmp, ena...

CVE-2016-4364

HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors...

CVE-2016-4364

Technical details (affected product/version, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and CVE records to confirm specifics and fixes.

ThaiWeb CMS 2015Q3 - SQL Injection Web Vulnerability

Document Title: =============== ThaiWeb CMS 2015Q3 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1555 Release Date: ============= 2015-07-22 Vulnerability Laboratory ID VL-ID: ==================================== 1555...

CVE-2015-4364

Multiple cross-site request forgery CSRF vulnerabilities in includes/campaignmonitorlists.admin.inc in the Campaign Monitor module 7.x-1.0 for Drupal allow remote attackers to hijack the authentication of users for requests that 1 enable list subscriptions via a request to...