Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2023-4418)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4418 advisory. - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz2223308 modauthopenidc Tenab...

CentOS 8 : mod_auth_openidc:2.3 (CESA-2023:4418)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:4418 advisory. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. The AES GCM decryption routine incorrectly uses the Tag length fr...

CVE-2022-4418

creationtimestamp| type| source ---|---|--- 2023-05-18 14:32:03+00:00| seen| https://t.me/cibsecurity/64381 2025-01-22 17:02:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2589...

CVE-2022-4418

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40208...

CVE-2022-4418

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40208...

CVE-2022-4418

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40208...

CVE-2022-4418

CVE-2022-4418 affects Acronis Cyber Protect Home Office on Windows, trước build 40208. Root cause: local privilege escalation from loading unsigned libraries. Affected product/version is explicitly stated in multiple connected sources. Mitigation: update to build 40208 or later; advisory referenc...

com.google.api-ads:common-axis2 (=0.1.0), com.google.code.magja:magja (>=0.0.1 <=0.0.3) +16 more potentially affected by CVE-2012-4418 via org.apache.axis2:axis2 (>=1.2 <=1.7.8)

org.apache.axis2:axis2 MAVEN version =1.2, =0.0.1, =2.8.28, =0.13.0, =0.13.0, =3.3, =3.3, =0.9, =0.11 and more Source cves: CVE-2012-4418 Source advisory: OSV:GHSA-88R4-38GC-97P4...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenEXR vulnerabilities (USN-4418-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4418-1 advisory. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a craft...

CVE-2018-4418

CVE-2018-4418 is described as a validation/input sanitization issue affecting macOS versions prior to Mojave 10.14. Connected documents confirm this CVE is referenced in Apple security updates and Red Hat/NVD entries with the same basic description. The exact vulnerable component and root cause a...

Debian: Security Advisory (DSA-4418-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Deja-XNU

Posted by Ian Beer, Google Project Zero This blog post revisits an old bug found by Pangu Team and combines it with a new, albeit very similar issue I recently found to try to build a "perfect" exploit for iOS 7.1.2. State of the art An idea I've wanted to play with for a while is to revisit old...

CVE-2017-4418

CVE-2017-4418 is rejected/not used; this candidate does not represent an active vulnerability entry.

CVE-2011-4418

This CVE entry is rejected/not used as stated; it does not represent an active vulnerability entry.

CVE-2011-4418

...

CVE-2016-4418

CVE-2016-4418 affects the ASN.1 BER dissector in Wireshark (epan/dissectors/packet-ber.c). A crafted packet that triggers an empty set can lead to a denial of service via a buffer over-read and application crash. The vulnerable ranges are Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2. Miti...

Debian DSA-3516-1 : wireshark - security update

Multiple vulnerabilities were discovered in the dissectors/parsers for DNP, RSL, LLRP, GSM A-bis OML, ASN 1 BER which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian: Security Advisory (DSA-3516-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark Multiple Vulnerabilities (Mar 2016) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

CVE-2015-4418

CVE-2015-4418 affects Zoho NetFlow Analyzer builds 10250 and earlier. The vulnerability stems from the password field not setting autocomplete to off, enabling potential unauthorized access when an unattended workstation is used. The connected sources (NVD/NVD-like records) corroborate this descr...