58 matches found
CVE-2022-4413
The CVE-2022-4413 issue concerns the Nuxt.js framework (nuxt/framework) prior to version 3.0.0-rc.13, where a reflected XSS vulnerability exists in the handling of error/stack traces. The root cause is unsafe rendering of stack traces (via v-html/$stack) in error templates, allowing an attacker t...
a10-octavia (>=1.0.0 <=2.2.0) potentially affected by CVE-2012-4413 via keystone (>=15.0.1 <=18.0.0)
keystone PYPI version =15.0.1, =1.0.0, =2.2.0 Source cves: CVE-2012-4413 Source advisory: OSV:GHSA-MRXV-65RV-6HXQ...
AlmaLinux 8 : tpm2-tools (ALSA-2021:4413)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:4413 advisory. - A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4413-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4413-1 advisory. Matthew Sheets discovered that the SELinux network label handling implementation in the Linux kernel could be coerced into de-referencing a NULL pointer....
CVE-2020-4413
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID:...
CVE-2020-4413
CVE-2020-4413 affects IBM Security Secret Server. The issue stems from failure to properly enable HTTP Strict Transport Security, enabling a remote attacker to obtain sensitive information via MITM. Affected product: IBM Security Secret Server (all editions) with version 10.7. Impact described as...
Privilege Escalation
Keystone is a Python implementation of the OpenStack http://www.openstack.org identity service API. It was found that Keystone incorrectly handled authorization failures. If a client attempted to change their tenant membership to one they are not authorized to join, Keystone correctly returned a...
Authorization Bypass
Keystone is a Python implementation of the OpenStack http://www.openstack.org identity service API. It was found that Keystone incorrectly handled authorization failures. If a client attempted to change their tenant membership to one they are not authorized to join, Keystone correctly returned a...
Arbitrary Code Execution
Keystone is a Python implementation of the OpenStack http://www.openstack.org identity service API. It was found that Keystone incorrectly handled authorization failures. If a client attempted to change their tenant membership to one they are not authorized to join, Keystone correctly returned a...
CVE-2018-4413
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1...
CVE-2018-4413
CVE-2018-4413 affects Apple platforms (iOS prior to 12.1, macOS Mojave before 10.14.1, tvOS before 12.1, watchOS before 5.1) and is described as a memory initialization issue addressed by improved memory handling. Root cause: memory initialization. Impact is cited as high confidentiality impact w...
Apple TV < 12.1 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities as described in the HT209194 security advisory. Note that only 4th generation devices are affected by these vulnerabilities. C Tenable Network Security,...
Cross site scripting
Cross-site scripting XSS vulnerability in the newTwittersignbutton function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter. NOTE: this may overlap...
CVE-2017-4413
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2011-4413
CVE-2011-4413 entry is rejected and not associated with any vulnerability.
GLSA-201612-41 : WebKitGTK+: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201612-41 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : A remote attacker can use multiple vectors to...
CVE-2015-4413
Cross-site scripting XSS vulnerability in the newfbsignbutton function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter...
CVE-2015-4413
The CVE-2015-4413 entry concerns the Nextend Facebook Connect WordPress plugin. A Cross-Site Scripting (XSS) vulnerability exists in the new_fb_sign_button function in nextend-facebook-connect.php that allows injection of arbitrary web script or HTML via the redirect_to parameter. Affected versio...