88 matches found
CVE-2023-4434 Missing Authorization in hamza417/inure
Missing Authorization in GitHub repository hamza417/inure prior to build88...
CVE-2023-4434 Missing Authorization in hamza417/inure
Missing Authorization in GitHub repository hamza417/inure prior to build88...
K57108702: Apache Tika XML External Entity vulnerability CVE-2016-4434
Security Advisory Description Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity XXE attacks via vectors involving 1 spreadsheets in OOXML files and 2 XMP metadata in PDF and other file formats,...
SUSE CVE-2005-4434
Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2022-4434
creationtimestamp| type| source ---|---|--- 2023-01-05 20:19:09+00:00| seen| https://t.me/cibsecurity/55987...
CVE-2022-4434
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...
CVE-2022-4434
CVE-2022-4434 affects Lenovo ThinkPad X13s by a buffer over-read in the ThinkPadX13s BIOS driver, enabling a local attacker with elevated privileges to disclose information. Public docs indicate BIOS/UEFI fixes exist (Lenovo LEN-103709) and updates to at least version 1.47 (N3HET75W) or newer; ot...
Qualcomm Chipsets and Lenovo BIOS Get Security Updates to Fix Multiple Flaws
Qualcomm on Tuesday released patches to address multiple security flaws in its chipsets, some of which could be exploited to cause information disclosure and memory corruption. The five vulnerabilities -- tracked from CVE-2022-40516 through CVE-2022-40520 -- also impact Lenovo ThinkPad X13s...
CVE-2020-4434
CVE-2020-4434 is documented in IBM Aspera advisories as a buffer overflow in certain IBM Aspera applications, exploitable with valid authentication and product configuration via the http fallback service. The IBM Security Bulletin lists affected products (e.g., IBM Aspera High-Speed Transfer Serv...
CVE-2012-4434
fwknop before 2.0.3 allow remote authenticated users to cause a denial of service server crash or possibly execute arbitrary code...
CVE-2012-4434
fwknop before 2.0.3 allow remote authenticated users to cause a denial of service server crash or possibly execute arbitrary code...
CVE-2012-4434
fwknop before 2.0.3 is affected by a vulnerability that lets remote authenticated users cause a denial-of-service (server crash) and possibly execute arbitrary code. Root cause details are not provided in the documents. Upgrade to fwknop 2.0.3 or apply vendor-recommended remediation per the linke...
CVE-2012-4434
fwknop before 2.0.3 allow remote authenticated users to cause a denial of service server crash or possibly execute arbitrary code...
Debian DSA-4434-1 : drupal7 - security update
A cross-site scripting vulnerability has been found in Drupal, a fully-featured content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2019-006 . C Tenable Network Security, Inc. The descriptive text and package checks in...
CVE-2018-4434
An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.2...
CVE-2018-4434
CVE-2018-4434 affects macOS via the Intel Graphics Driver. The issue is an out-of-bounds read caused by inadequate input validation, patched in macOS Mojave 10.14.2 (and related security updates). The Apple security content entry for CVE-2018-4434 lists the Intel Graphics Driver as impacted and n...
CVE-2016-4434
Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity XXE attacks via vectors involving 1 spreadsheets in OOXML files and 2 XMP metadata in PDF and other file formats, a related issue to...
CVE-2016-4434
CVE-2016-4434 (Apache Tika) affects Tika prior to 1.13, where improper initialization of the XML parser/handlers enables XML External Entity (XXE) attacks via OOXML spreadsheets and XMP metadata in PDFs and other formats. The root cause is an XXE vulnerability in XML parsing that can lead to read...
CVE-2016-4434
Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity XXE attacks via vectors involving 1 spreadsheets in OOXML files and 2 XMP metadata in PDF and other file formats, a related issue to...