70 matches found
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Exim vulnerability (USN-4366-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4366-1 advisory. It was discovered that Exim incorrectly handled certain inputs. An remote attacker could possibly use this issue to access sensitive...
CVE-2018-4366
CVE-2018-4366 is an out-of-bounds read in FaceTime video processing that occurs on Macs, caused by memory corruption with improper input validation. It affects versions prior to iOS 12.1 (per the vulnerability description and Apple’s entry). The issue’s impact is memory corruption potentially lea...
Debian DSA-4366-1 : vlc - security update
An integer underflow was discovered in the CAF demuxer of the VLC media player. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4366. The text itself is copyright C Software in the Public Interest, Inc...
CVE-2018-4366
creationtimestamp| type| source ---|---|--- 2018-11-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45788...
DEBIAN-CVE-2013-4366
http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification...
CVE-2013-4366
http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification...
CVE-2013-4366
CVE-2013-4366 concerns http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1, where the code does not ensure that the X509HostnameVerifier is non-null. This can allow attackers to trigger unspecified impact via vectors involving hostname verification. Connected documents...
CVE-2011-4366
CVE-2011-4366 is rejected/not used; reference CVE-2011-4090 instead.
CVE-2016-4366
HPE Systems Insight Manager (SIM) prior to 7.5.1 is affected by CVE-2016-4366, allowing remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Affected product is HPE SIM; the root cause is not explicitly detailed in the provided docum...
CVE-2015-4366
Cross-site scripting XSS vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-4366
Cross-site scripting XSS vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-4366
CVE-2015-4366 affects Drupal’s contributed Mover module (6.x-1.0). The issue stems from insufficient sanitization of user-supplied text in certain pages, enabling Cross-Site Scripting (XSS) by remote authenticated users who have permissions to create/edit nodes. No exploit details provided beyond...
SA-CONTRIB-2015-070 - Mover - Cross Site Scripting (XSS) - Unsupported
The Mover modules provide the ability to move content between Drupal sites. The module doesn't sufficiently sanitize user supplied text in some pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have permission to...
CVE-2014-4366
Vulnerability summary (CVE-2014-4366) : In iOS Mail prior to iOS 8, the Mail client could send the LOGIN command to IMAP servers that advertised LOGINDISABLED, enabling an attacker to sniff and obtain cleartext credentials on the network. Affected component : Mail app (iOS). Root cause : Mail did...
CVE-2014-4366
Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain sensitive cleartext information by sniffing the network...
CVE-2012-4366
creationtimestamp| type| source ---|---|--- 2013-01-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38164...
CVE-2012-4366: Insecure default WPA2 passphrase in multiple Belkin wireless routers
CVE-2012-4366: Insecure default WPA2 passphrase in multiple Belkin wireless routers I. Background Belkin ships many wireless routers with an encrypted wireless network configured by default. The network name ESSID and the seemingly random password is printed on a label at the bottom of the device...
CVE-2012-4366
CVE-2012-4366 affects Belkin Surf N150 (F7D1301v1), N900 (F9K1104v1), N450 (F9K1105V2), and N300 (F7D2301v1) routers. Root cause: default WPA2-PSK passphrase is deterministically generated from eight hex digits of the WAN MAC address, making the key predictable. Impact: attacker can access the wi...