105 matches found
CVE-2023-4418
The CVE-2023-4418 issue affects the SICK LMS5xx family, where a remote unauthenticated attacker can induce a TCP SYN flood to exhaust resources and render the LMS5xx unavailable. Several connected documents confirm a network-based DoS via TCP SYN requests impacting availability, with PT-2023-2914...
Rocky Linux 8 : mod_auth_openidc:2.3 (RLSA-2023:4418)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:4418 advisory. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. The AES GCM decryption routine incorrectly uses the Tag length fro...
Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2023-4418)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4418 advisory. - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz2223308 modauthopenidc Tenab...
CentOS 8 : mod_auth_openidc:2.3 (CESA-2023:4418)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:4418 advisory. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. The AES GCM decryption routine incorrectly uses the Tag length fr...
CVE-2022-4418
creationtimestamp| type| source ---|---|--- 2023-05-18 14:32:03+00:00| seen| https://t.me/cibsecurity/64381 2025-01-22 17:02:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2589...
CVE-2022-4418
Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40208...
CVE-2022-4418
CVE-2022-4418 affects Acronis Cyber Protect Home Office on Windows, trước build 40208. Root cause: local privilege escalation from loading unsigned libraries. Affected product/version is explicitly stated in multiple connected sources. Mitigation: update to build 40208 or later; advisory referenc...
CVE-2022-4418
Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40208...
CVE-2022-4418
Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40208...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenEXR vulnerabilities (USN-4418-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4418-1 advisory. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a craft...
CVE-2018-4418
CVE-2018-4418 is described as a validation/input sanitization issue affecting macOS versions prior to Mojave 10.14. Connected documents confirm this CVE is referenced in Apple security updates and Red Hat/NVD entries with the same basic description. The exact vulnerable component and root cause a...
Debian: Security Advisory (DSA-4418-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Deja-XNU
Posted by Ian Beer, Google Project Zero This blog post revisits an old bug found by Pangu Team and combines it with a new, albeit very similar issue I recently found to try to build a "perfect" exploit for iOS 7.1.2. State of the art An idea I've wanted to play with for a while is to revisit old...
CVE-2017-4418
CVE-2017-4418 is rejected/not used; this candidate does not represent an active vulnerability entry.
CVE-2011-4418
This CVE entry is rejected/not used as stated; it does not represent an active vulnerability entry.
CVE-2016-4418
CVE-2016-4418 affects the ASN.1 BER dissector in Wireshark (epan/dissectors/packet-ber.c). A crafted packet that triggers an empty set can lead to a denial of service via a buffer over-read and application crash. The vulnerable ranges are Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2. Miti...
Debian DSA-3516-1 : wireshark - security update
Multiple vulnerabilities were discovered in the dissectors/parsers for DNP, RSL, LLRP, GSM A-bis OML, ASN 1 BER which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
Debian: Security Advisory (DSA-3516-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Wireshark Multiple Vulnerabilities (Mar 2016) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...