CVE-2020-4415

CVE-2020-4415 affects IBM Spectrum Protect Server. The Nessus/IBM bulletin details a stack-based buffer overflow caused by improper bounds checking, enabling a remote attacker (no authentication) to execute arbitrary code or crash the server on vulnerable versions: 7.1.0.0–7.1.10.0 and 8.1.0.0–8....

CVE-2019-4415

CVE-2019-4415 affects IBM Cloud Private 3.1.1 and 3.1.2 where a local user can escalate privileges due to improper SecurityContextConstraints handling. The IBM security bulletin confirms icp-scc SCC is erroneously assigned to all pods, enabling privilege escalation. A remediation is provided for ...

Remote Code Execution

Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. A cross-site scripting XSS flaw was found in the way the Red Hat Satellite web interface...

CVE-2018-4415

CVE-2018-4415 is a memory-corruption issue in Apple’s CoreAnimation (QuartzCore) affecting macOS Mojave 10.14.x and earlier up to 10.14.0. The root cause is in CA::Render::InterpolatedFunction::InterpolatedFunction and its use of CA::Render::Decoder to decode objects, where incorrect handling can...

Debian DSA-4415-1 : passenger - security update

An arbitrary file read vulnerability was discovered in passenger, a web application server. A local user allowed to deploy an application to passenger, can take advantage of this flaw by creating a symlink from the REVISION file to an arbitrary file on the system and have its content displayed...

CVE-2017-4415

CVE-2017-4415 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4415

wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted file...

UBUNTU-CVE-2016-4415

wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted file...

CVE-2016-4415

wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted file...

CVE-2016-4415

Wireshark 2.x before 2.0.2 is affected by CVE-2016-4415 due to a bug in wiretap/vwr.c (IxVeriWave file parser) that incorrectly increases an octet count. A remote attacker can craft a file to trigger a heap-based buffer overflow, causing a denial of service (application crash). A fix is available...

CVE-2016-4415

wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted file...

CVE-2015-4415

The provided connected sources confirm CVE-2015-4415 affects Magnifica Webscripts Anima Gallery 2.6, specifically the func.php component. The vulnerability is a directory traversal flaw that allows remote attackers to include and execute arbitrary local files by manipulating the theme or lang coo...

Anima Gallery Multiple Vulnerabilities

Anima Gallery is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4415

CVE-2014-4415 affects WebKit as used in Apple iOS before 8 and Apple TV before 7 . A crafted web site can trigger memory corruption, allowing a remote attacker to execute arbitrary code or cause a denial of service (application crash). Root cause is memory handling issues in WebKit (as described ...

CVE-2013-4415

CVE-2013-4415 affects Red Hat Satellite/Spacewalk (Spacewalk 5.6 and RHN Satellite). The connected sources describe multiple cross-site scripting (XSS) vulnerabilities in the Red Hat Satellite web interface, enabling remote attackers to inject arbitrary web script or HTML via numerous parameters ...

CVE-2012-4415: guacamole local root vulnerability

Overview ======== "Guacamole is an HTML5 web application that provides access to desktop environments using remote desktop protocols such as VNC or RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser. No plugins are needed: the client...

CVE-2012-4415

CVE-2012-4415 describes a stack-based buffer overflow in guac_client_plugin_open within Guacamole’s libguac, exploitable via a long protocol name. Affected: Guacamole before 0.6.3. Impact per sources: remote crash or arbitrary code execution. Mitigation: upgrade to Guacamole 0.6.3 or newer (addre...

Fedora Update for guacamole-common-js FEDORA-2012-14097

Check for the Version of guacamole-common-js OpenVAS Vulnerability Test Fedora Update for guacamole-common-js FEDORA-2012-14097 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Fedora Update for guacamole-ext FEDORA-2012-14179

Check for the Version of guacamole-ext OpenVAS Vulnerability Test Fedora Update for guacamole-ext FEDORA-2012-14179 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for libguac-client-vnc FEDORA-2012-14097

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...