Oracle Linux 8 : sqlite (ELSA-2021-4396)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4396 advisory. - Removing fix for CVE-2019-19645 unaffected - Removing fix for CVE-2019-19880 unaffected - Fixed CVE-2019-5827 1710184 - Fixed CVE-2019-13750 1786510 ...

CentOS 8 : sqlite (CESA-2021:4396)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4396 advisory. - sqlite: dropping of shadow tables not restricted in defensive mode CVE-2019-13750 - sqlite: fts3: improve detection of corrupted records CVE-2019-137...

SUSE: Security Advisory (SUSE-SU-2014:0744-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : libexif vulnerabilities (USN-4396-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4396-1 advisory. It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive...

Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition is affected by ASoC vulnerability (CVE-2019-4396)

Summary IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise has addressed the ASoC vulnerability. Vulnerability Details CVEID: CVE-2019-4396 DESCRIPTION: IBM Cloud Orchestrator is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remot...

IBM Cloud Orchestrator CVE-2019-4396 CRLF Injection Vulnerability

Description IBM Cloud Orchestrator is prone to a CRLF-injection vulnerability. An attacker can exploit this issue to add arbitrary headers to a webpage. This may aid in further attacks. The following versions are vulnerable: IBM Cloud Orchestrator 2.5, 2.5.0.1, 2.5.0.2, 2.5.0.3, 2.5.0.4, 2.5.0.5,...

CVE-2018-4396

CVE-2018-4396: A validation issue was fixed by improved input sanitization affecting macOS before Mojave 10.14. The CVE entry is supported by Red Hat and Apple references; Apple’s Mojave 10.14 updates address multiple issues and include this CVE among those for macOS graphics components. CVSSv3 v...

Synology Cloud Station Backup for Windows Untrusted Search Path Vulnerability

Synology Cloud Station Backup for Windows is a Windows-based application for backing up computer data from Synology. An untrusted search path vulnerability exists in the installer of Synology Cloud Station Backup for Windows-based platforms prior to version 4.2.5-4396. A local attacker can exploi...

CVE-2016-4396

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4396

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4396

CVE-2016-4396 affects HPE System Management Homepage (SMH) prior to v7.6. The vulnerability is a remote code execution stemming from an overflow in mod_smh_config.so when handling the TKN parameter (SSO proxy path). An unauthenticated, remote attacker can exploit this to execute arbitrary code on...

Oracle: Security Advisory (ELSA-2013-1426)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4396

Multiple cross-site request forgery CSRF vulnerabilities in the Keyword Research module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to hijack the authentication of users with the "kwresearch admin site keywords" permission for requests that 1 create, 2 delete, or 3 set priorities to...

CVE-2015-4396

CVE-2015-4396 affects Drupal Keyword Research module (6.x-1.x) prior to 6.x-1.2. Root cause: CSRF vulnerabilities allow remote attackers to hijack the authentication of users with the kwak research admin site keywords permission, enabling actions that create, delete, or set priorities on keywords...

Fedora 21 : nx-libs-3.5.0.29-1.fc21 (2015-3948)

Update to 3.5.0.29 : - further reduction of code size by Mike Gabriel - /.x2go/config/keystrokes.cfg, /etc/x2go/keystrokes.cfg and /etc/nxagent/keystrokes.cfg are now respected thanks to Horst Schirmeier - security fixes for CVE-2011-2895, CVE-2011-4028, CVE-2013-4396, CVE-2013-6462, CVE-2014-020...

CVE-2014-4396

CVE-2014-4396 concerns an insufficient validation in an unspecified integrated graphics driver routine of the Intel Graphics Driver subsystem on Apple OS X prior to 10.9.5. The flaw allows a crafted application to trigger execution of arbitrary code in a privileged context. The vulnerability is d...

CVE-2014-4401

The CVE concerns Apple OS X prior to 10.9.5 and the Intel Graphics Driver subsystem. It describes an unspecified integrated graphics driver routine that does not properly validate calls, allowing arbitrary code execution in a privileged context via a crafted application. The impact is a local cod...

openSUSE Security Update : xorg-x11-server (openSUSE-SU-2013:1610-1)

Fixes the following security issue : - an authenticated X client can cause an X server to use memory after it was freed, potentially leading to crash and/or memory corruption. CVE-2013-4396, bnc843652 and the following bug was fixed too : - rfbAuthReenable is accessing rfbClient structure that wa...

Oracle Linux 6 : xorg-x11-server (ELSA-2013-1620)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1620 advisory. - CVE-2013-1940: Fix xf86FlushInput to drain evdev events too 950438 - CVE-2013-4396: Fix use-after free in ImageText requests 1014561 Tenable has extracted the...