80 matches found
CVE-2021-4412 WP Prayer <= 1.6.5 - Cross-Site Request Forgery Bypass
The WP Prayer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.5. This is due to missing or incorrect nonce validation on the save and export functions. This makes it possible for unauthenticated attackers to save plugin settings and trigger a...
Debian: Security Advisory (DLA-757-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2012-4412
Integer overflow in string/strcolll.c in the GNU C Library aka glibc or libc6 2.17 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow...
Slackware: Security Advisory (SSA:2014-296-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: A vulnerability has been identified in Spectrum Scale packaged in Elastic Storage Server where an unprivileged user to cause denial of service( CVE-2020-4412)
Summary The Elastic Storage Server is affected by a vulnerability in IBM Spectrum Scale where an unprivileged user can cause a denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4412 DESCRIPTION: The Spectrum Scale 4.2.0.0 through 4.2.3.21 and...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4412-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4412-1 advisory. Matthew Sheets discovered that the SELinux network label handling implementation in the Linux kernel could be coerced into de-referencing a NULL pointer....
Ubuntu: Security Advisory (USN-4412-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4412
The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster...
CVE-2020-4412
CVE-2020-4412 affects IBM Spectrum Scale file system components (versions 4.2.0.0–4.2.3.21 and 5.0.0.0–5.0.4.3). The vulnerability allows a local attacker to force the mmfsd/mmsdrserv daemons to exit, impacting cluster functionality and file-system availability (DoS). Some IBM bulletin entries al...
Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale where an unprivileged user to cause denial of service( CVE-2020-4412)
Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale that could allow a local attacker to cause a denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4412 DESCRIPTION: The Spectrum Scale file system component is...
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2019-1552)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4412
IBM Cognos Controller is affected by CVE-2019-4412, where sensitive information can be exposed via URL parameters. The issue affects IBM Cognos Controller versions 10.3.0 FP1 IF13, 10.3.1 IF12, 10.4.0 FP1 IF4, 10.4.0 FP1 IF5, and 10.4.1 IF1/IF2. Root cause involves information stored in URL param...
CVE-2019-16400
Samsung Galaxy S8 plus Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3, Samsung Galaxy S3 Android version: 4.3, Build Number: JSS15J.I9300XXUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: I9300XXUGNA8, and Samsung...
DEBIAN-CVE-2013-4412
slim has NULL pointer dereference when using crypt method from glibc 2.17...
CVE-2013-4412
slim has NULL pointer dereference when using crypt method from glibc 2.17...
CVE-2013-4412
CVE-2013-4412 affects slim, with a NULL pointer dereference when using the crypt() function from glibc 2.17. The connected records confirm the description across multiple sources (NVD, OSV, Ubuntu/Debian advisories, and vendor entries), but none provide concrete details on affected versions beyon...
CVE-2018-4412
CVE-2018-4412: Apple memory-corruption issue fixed with improved input validation. Affected: iOS
Debian DSA-4412-1 : drupal7 - security update
It was discovered that missing input sanitising in the file module of Drupal, a fully-featured content management framework, could result in cross-site scripting. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2019-004. C Tenable Network...