Google Chrome Security Update (chrome-desktop-stable-update-2023-08) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2023-4430

CVE-2023-4430 is a use-after-free in Vulkan within Google Chrome/Chromium prior to 116.0.5845.110, enabling remote heap corruption via a crafted HTML page. Affected: Chrome/Chromium; root cause: use-after-free in Vulkan handling. Impact: high (remote code execution risk, heap corruption). Remedia...

SUSE CVE-2015-4430

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execu...

IBM Data Risk Manager Arbitrary File Download (CVE-2020-4430)

An arbitrary file download vulnerability exists in IBM Data Risk Manager. Successful exploitation of this vulnerability would allow a remote attacker to download arbitrary files from affected system...

CVE-2020-4430

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 07:28:19+00:00| seen| https://t.me/arpsyndicate/1421 2024-12-24 20:23:41+00:00| seen|...

Ubuntu 20.04 LTS : Pillow vulnerabilities (USN-4430-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4430-2 advisory. USN-4430-1 fixed vulnerabilities in Pillow. This update provides the corresponding updates for Ubuntu 20.04 LTS. Tenable has extracted the preceding...

Ubuntu: Security Advisory (USN-4430-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : Pillow vulnerabilities (USN-4430-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4430-1 advisory. It was discovered that Pillow incorrectly handled certain image files. If a user or automated system were tricked into opening a...

Ubuntu: Security Advisory (USN-4430-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4430

CVE-2020-4430 affects IBM Data Risk Manager (IDRM) 2.0.1–2.0.4. A remote authenticated attacker can traverse directories via a specially crafted URL request to download arbitrary files from the system. The related Nessus/Checkpoints indicate multiple vulnerabilities in IDRM 2.0.1–2.0.4, including...

CVE-2019-4430

CVE-2019-4430 affects IBM Maximo Asset Management 7.6. A remote attacker can exploit a path traversal flaw by sending a crafted URL containing dot-dot sequences (/../) to view arbitrary files on the system. The NVD notes a CVSSv3.1 base score of 7.5 (HIGH) with network access, low attack complexi...

Security Bulletin: IBM Maximo Asset Management is vulnerable to File Path Traversal (CVE-2019-4430)

Summary IBM Maximo Asset Management is vulnerable to File Path Traversal Vulnerability Details CVEID: CVE-2019-4430 DESCRIPTION: IBM Maximo Asset Management could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot...

Debian: Security Advisory (DSA-4430-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-4430

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1...

CVE-2018-4430

CVE-2018-4430 describes a lock-screen vulnerability in iOS where an attacker could access contacts on a locked device. The Red Hat and NVD entries mirror the Apple advisory, stating the issue affected versions prior to iOS 12.1.1 and was addressed by improved state management. The Apple security ...

CVE-2017-4430

...

CVE-2017-4430

CVE-2017-4430 is rejected and not an active vulnerability entry.

CVE-2011-4430

...

CVE-2011-4430

CVE-2011-4430 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2016-4430

CVE-2016-4430 affects Apache Struts 2.3.20–2.3.28.1, where token validation is mishandled, enabling remote CSRF attacks via unspecified vectors. Public sources in connected docs (IBM security advisories and the NVD entry) corroborate the CSRF impact and tie it to the same Struts versions. The vul...