58 matches found
Ubuntu 19.10 : Apache Ant vulnerability (USN-4380-1)
It was discovered that Apache Ant created temporary files with insecure permissions. An attacker could use this vulnerability to read sensitive information leaked into /tmp, or potentially inject malicious code into a project that is built with Apache Ant. Note that Tenable Network Security has...
CVE-2018-4380
CVE-2018-4380 describes a lock-screen information disclosure in iOS prior to 12.0.1, where a local attacker could view photos and contacts from the lock screen. The issue was addressed in iOS 12.0.1 by restricting options offered on a locked device. Affected versions: prior to iOS 12.0.1. Exploit...
Debian: Security Advisory (DSA-4380-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
About the security content of iOS 12.0.1
About the security content of iOS 12.0.1 This document describes the security content of iOS 12.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
DEBIAN-CVE-2012-4380
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors...
CVE-2012-4380
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors...
CVE-2012-4380
CVE-2012-4380 affects MediaWiki before 1.18.5 and 1.19.x before 1.19.2, allowing remote attackers to bypass the GlobalBlocking extension IP address blocking and create an account via unspecified vectors. The connected sources consistently describe the same impact across Windows/Linux OpenVAS entr...
CVE-2016-4380
Cross-site scripting XSS vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4380
CVE-2016-4380 affects HPE Operations Manager (AdminUI) 9.21.x prior to 9.21.130. Description: Cross-site scripting (XSS) vulnerability in the AdminUI that allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Root cause: inadequate input handling in the...
CVE-2016-4380
Cross-site scripting XSS vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-4380
Cross-site scripting XSS vulnerability in the Linear Case module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-4380
CVE-2015-4380 affects Drupal via the Linear Case module (6.x-1.x) prior to 6.x-1.3. Root cause: insufficient sanitization of user-supplied input in certain Linear Case pages. Impact: XSS vulnerability that could be exploited by remote authenticated users with specific permissions to inject arbitr...
CVE-2014-4380
Concretely, CVE-2014-4380 is tied to IOHIDFamily in macOS (OS X Yosemite 10.10.x up to 10.10.2). The issue is a heap buffer overflow in IOHIDFamily's handling of key-mapping properties that could allow a local user to execute arbitrary code with system privileges. Mitigation in the connected doc ...
CVE-2013-4380
Cross-site scripting XSS vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer mediafront" permission to inject arbitrary web script or HTML via the preset settings...
CVE-2013-4380
The MediaFront Drupal module is affected by an XSS vulnerability (CVE-2013-4380) in Drupal 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1. The issue arises from insufficient filtering of user input in the MediaFront preset settings, allowing remote authenticated users ...
CVE-2011-4380
CVE-2011-4380 is rejected/not used; this entry does not represent an active vulnerability.
SA-CONTRIB-2013-074 - MediaFront - Cross Site Scripting (XSS)
The MediaFront module provides a front-end media presentation layer for Drupal The module doesn't sufficiently filter user input from MediaFront preset settings. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer mediafront" to exploit th...
FreeBSD Ports: mediawiki
The remote host is missing an update to the system as announced in the referenced advisory. VID 7c0fecd6-f42f-11e1-b17b-000c2977ec30 OpenVAS Vulnerability Test $ Description: Auto generated from VID 7c0fecd6-f42f-11e1-b17b-000c2977ec30 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...