CVE-2021-4435

CVE-2021-4435 describes an untrusted search path vulnerability in Yarn. The issue can allow execution of malicious commands when a victim runs certain Yarn commands in a directory containing attacker-controlled content. Impact details in the NVD entry show a high-severity, local attack with requi...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2023-4435 Improper Input Validation in hamza417/inure

Improper Input Validation in GitHub repository hamza417/inure prior to build88...

CVE-2023-4435 Improper Input Validation in hamza417/inure

Improper Input Validation in GitHub repository hamza417/inure prior to build88...

CVE-2023-4435 Improper Input Validation in hamza417/inure

Improper Input Validation in GitHub repository hamza417/inure prior to build88...

CVE-2023-4435

CVE-2023-4435 describes improper input validation in the GitHub repository hamza417/inure prior to build88. The consolidated data indicates this affects the Inure app (versions before build88) and could impact confidentiality (high) with a local attack vector and user interaction. A connected Hun...

CVE-2022-4435

creationtimestamp| type| source ---|---|--- 2023-01-05 20:19:11+00:00| seen| https://t.me/cibsecurity/55989...

CVE-2022-4435

CVE-2022-4435 affects Lenovo ThinkPad X13s BIOS via the LenovoRemoteConfigUpdateDxe driver. The documented root cause is a buffer over-read, enabling a local attacker with elevated privileges to cause information disclosure. Affected component is the ThinkPad X13s BIOS/UEFI implementation; impact...

Qualcomm Chipsets and Lenovo BIOS Get Security Updates to Fix Multiple Flaws

Qualcomm on Tuesday released patches to address multiple security flaws in its chipsets, some of which could be exploited to cause information disclosure and memory corruption. The five vulnerabilities -- tracked from CVE-2022-40516 through CVE-2022-40520 -- also impact Lenovo ThinkPad X13s...

Ubuntu: Security Advisory (USN-4435-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4435-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ClamAV vulnerabilities (USN-4435-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4435-1 advisory. It was discovered that ClamAV incorrectly handled parsing ARJ archives. A remote attacker could possibly use this issue to cause...

CVE-2020-4435

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service DoS through the http fallback service. IBM X-Force ID:...

CVE-2020-4435

CVE-2020-4435 affects IBM Aspera applications. The issue is arbitrary memory corruption due to product configuration, enabling an attacker with system knowledge to potentially execute arbitrary code or cause a DoS via the http fallback service. In IBM’s security bulletin for Aspera products, affe...

CVE-2018-4435

CVE-2018-4435 is a kernel-level logic issue addressed by Apple across multiple platforms. According to the initial entry, the vulnerability affected iOS before 12.1.1, macOS Mojave before 10.14.2, tvOS before 12.1.1, and watchOS before 5.1.2, and was fixed by applying improved restrictions. Suppo...

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-006)

The remote host is running Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - AMD - Disk Images - IOHIDFamily - Kernel - WindowServer C Tenable Network Security, Inc. include"compat.inc"; if description...

macOS 10.13.6 Multiple Vulnerabilities (Security Update 2018-003)

The remote host is running macOS 10.13.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - AMD - Disk Images - IOHIDFamily - Kernel - WindowServer C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2018-4435

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45960 2018-12-12 05:16:20+00:00| published-proof-of-concept| https://t.me/defconnews/167...

XNU POSIX Shared Memory Mapping Issue

XNU: POSIX shared memory mappings have incorrect maximum protection CVE-2018-4435 When the mmap syscall is invoked on a POSIX shared memory segment DTYPEPSXSHM, pshmmmap maps the shared memory segment's pages into the address space of the calling process. It does this with the following code: int...

About the security content of watchOS 5.1.2

About the security content of watchOS 5.1.2 This document describes the security content of watchOS 5.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...