74 matches found
SUSE: Security Advisory (SUSE-SU-2013:1626-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4419-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4419-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4419-1 advisory. It was discovered that a race condition existed in the Precision Time Protocol PTP implementation in the Linux kernel, leading to a use-after- free...
CVE-2020-4419
CVE-2020-4419 affects IBM Jazz Reporting Service (JRS) Report Builder in versions 7.0, 6.0.6.1, and 6.0.6. The issue is a cross-site scripting vulnerability that can let an attacker embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. I...
Security Bulletin: Security vulnerability affects the Report Builder that is shipped with Jazz Reporting Service (CVE-2020-4419)
Summary There is a security vulnerability in the Report Builder shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2020-4419 DESCRIPTION: IBM Jazz Reporting Service is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the...
CVE-2019-4419
IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162737...
Security Bulletin: IBM® Intelligent Operations Center is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data (CVE-2019-4419)
Summary IBM® Intelligent Operations Center is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. Vulnerability Details CVEID: CVE-2019-4419 DESCRIPTION:...
CVE-2018-4419
CVE-2018-4419 is a memory corruption issue addressed by Apple and Red Hat advisories. Affected products include Apple platforms prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1 and watchOS 5.1, where an underlying memory handling flaw was mitigated. The public documents state that the fix invol...
Debian DSA-4419-1 : twig - security update
Fabien Potencier discovered that twig, a template engine for PHP, did not correctly enforce sandboxing. This could result in potential information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
Apple TV < 12.1 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities as described in the HT209194 security advisory. Note that only 4th generation devices are affected by these vulnerabilities. C Tenable Network Security,...
CVE-2011-4419
CVE-2011-4419 entry is rejected and not used as an active vulnerability entry.
CVE-2016-4419
epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to cause a denial of service large loop via a crafted packet...
CVE-2016-4419
epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to cause a denial of service large loop via a crafted packet...
CVE-2016-4419
Wireshark SPICE dissector (epan/dissectors/packet-spice.c) in Wireshark 2.x is vulnerable to a denial-of-service via crafted packets that mishandle capability data. The issue affects Wireshark versions prior to 2.0.2, enabling a large-loop condition when processing SPICE data in the SPICE parser....
Gentoo Security Advisory GLSA 201301-03
Gentoo Linux Local Security Checks GLSA 201301-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CentOS 6 : libguestfs (CESA-2013:1536)
Updated libguestfs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...
CVE-2014-4419
CVE-2014-4419: Kernel memory disclosure via uninitialized memory in the Apple OS X/iOS network statistics interface (kernel). The issue allows a crafted application to obtain sensitive memory content and memory-layout information. Affected platform references in the public data point to OS X kern...
openSUSE Security Update : tor (openSUSE-SU-2012:1278-1)
update to 0.2.2.39 bnc780620 Changes in version 0.2.2.39 - 2012-09-11 Tor 0.2.2.39 fixes two more opportunities for remotely triggerable assertions. o Security fixes : - Fix an assertion failure in tortimegm that could be triggered by a badly formatted directory object CVE-2012-4922. - Do not...