CVE-2022-4367

Rejected reason: Duplicate, use CVE-2023-4279 instead...

Chromium: CVE-2023-4367 Insufficient policy enforcement in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Debian: Security Advisory (DSA-5479-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-4367

creationtimestamp| type| source ---|---|--- 2023-08-15 22:36:58+00:00| seen| https://t.me/cibsecurity/68597...

CVE-2023-4367

Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4367

Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4367

CVE-2023-4367 affects Google Chrome/Chromium’s Extensions API. The vulnerability arises from insufficient policy enforcement, enabling a user who installs a crafted malicious extension to bypass enterprise policy. Public advisories and vendor updates reference Chrome/Chromium fixes in the 116.0.5...

CVE-2021-4367

The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Options Change by using the floimportformsoptions AJAX action in versions up to, and including, 1.0.35 due to insufficient input sanitization and output escaping along with missing...

CVE-2021-4367

CVE-2021-4367 : The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the flo_import_forms_options AJAX action in versions up to and including 1.0.35. Root cause: insufficient input sanitization and output escaping, coupled with missin...

com.github.httpmock:mock-http-server-junit (>=1.0.0 <=1.1.5), com.github.httpmock:mock-http-server-standalone (>=1.0.0 <=1.1.9) +41 more potentially affected by CVE-2011-4367 via org.apache.myfaces.core:myfaces-impl (>=2.1.0 <=2.1.5)

org.apache.myfaces.core:myfaces-impl MAVEN version =2.1.0, =1.0.0, =1.0.0, =0.9.5, =0.9.6, =0.9.6, =2.4.2, =2.1.0, =2.1.0, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =1.0.1, =1.5.1, =1.5.1, =1.7.5 and more Source cves: CVE-2011-4367 Source advisory: OSV:GHSA-GJFX-9WX3-J6R7...

com.github.almex:weblets-demo (=1.1.3), org.apache.geronimo.assemblies:geronimo-jetty8-javaee6 (=3.0-M1) +22 more potentially affected by CVE-2011-4367 via org.apache.myfaces.core:myfaces-impl (>=2.0.0 <=2.0.11)

org.apache.myfaces.core:myfaces-impl MAVEN version =2.0.0, =2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.myfaces.core:myfaces-impl and may be impacted: - com.github.almex:weblets-demo =1.1.3 -...

CVE-2020-4367

CVE-2020-4367 affects IBM Planning Analytics Local 2.0 (Planning Analytics Local) with a vulnerability in cryptographic algorithms described as weaker than expected, potentially allowing decryption of highly sensitive information. The issue is corroborated by multiple sources in the Connected doc...

Ubuntu: Security Advisory (USN-4367-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS : Linux kernel regression (USN-4367-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4367-2 advisory. USN-4367-1 fixed vulnerabilities in the 5.4 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4367-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4367-1 advisory. It was discovered that the btrfs implementation in the Linux kernel did not properly detect that a block was marked dirty in some situations. An attacker...

Ubuntu: Security Advisory (USN-4367-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4367

CVE-2013-4367 affects ovirt-engine 3.2 running on Linux kernel 3.1 and newer, where upstream kernel behavior change with os.chmod(-1) causes certain files to become world-writable. This is a local attacker issue with potential exposure of sensitive data, as reflected by CVSS metrics (NVD CVSSv3.1...

CVE-2013-4367

ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod works when passed a mode of '-1'...

CVE-2018-4367

CVE-2018-4367 is a memory-related vulnerability described as a stack corruption issue that affected iOS and macOS (prior to iOS 12.1). Apple’s entry ties it to FaceTime, noting a memory corruption problem resolved by improved input validation and patched in iOS 12.1. The NVD entry likewise states...

Debian: Security Advisory (DSA-4367-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...