83 matches found
Rocky Linux 8 : GNOME (RLSA-2020:4451)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4451 advisory. - A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iClou...
CVE-2023-4451
creationtimestamp| type| source ---|---|--- 2023-08-20 18:40:06+00:00| seen| https://t.me/cibsecurity/68864...
CVE-2023-4451
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4451 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4451 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4451
Cockpit (cockpit-hq/cockpit) before version 2.6.4 is vulnerable to Reflected Cross-site Scripting (XSS) via the install/index.php interaction, due to insufficient sanitization/encoding of the space parameter in the installation interface. Exploitation could allow an unauthenticated attacker to in...
SUSE CVE-2013-4451
gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating 1 /.gitolite.rc, 2 /.gitolite, or 3 /repositories/gitolite-admin.git on fresh installs...
CVE-2022-4451 Sassy Social Share < 3.3.45 - Contributor+ Stored XSS
The Social Sharing WordPress plugin before 3.3.45 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
CVE-2022-4451
CVE-2022-4451 affects the Social Sharing WordPress plugin prior to 3.3.45. The root cause is failure to validate/escape certain shortcode attributes, enabling Stored XSS where a user with low privilege (as low as contributor) can target high-privilege admins. Public sources describe the issue and...
CVE-2022-4451 Sassy Social Share < 3.3.45 - Contributor+ Stored XSS
The Social Sharing WordPress plugin before 3.3.45 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
Rocky Linux 8 : gnutls and nettle (RLSA-2021:4451)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4451 advisory. - A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated...
Ubuntu: Security Advisory (USN-4451-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 8 : gnutls and nettle (ALSA-2021:4451)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4451 advisory. - A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a...
Oracle Linux 8 : gnutls / and / nettle (ELSA-2021-4451)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4451 advisory. - Backport CVE-2021-3580 from upstream 3.7.3 release 1967990 Tenable has extracted the preceding description block directly from the Oracle Linux...
CentOS 8 : gnutls and nettle (CESA-2021:4451)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4451 advisory. - gnutls: Use after free in client keyshare extension CVE-2021-20231 - gnutls: Use after free in clientsendparams in lib/ext/presharedkey.c...
RHEL 8 : gnutls and nettle (RHSA-2021:4451)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4451 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as...
CentOS 8 : GNOME (CESA-2020:4451)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4451 advisory. - webkitgtk: Incorrect state management leading to universal cross-site scripting CVE-2019-8625, CVE-2019-8813, CVE-2020-3867 - webkitgtk: Multiple...
Oracle Linux 8 : GNOME (ELSA-2020-4451)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4451 advisory. - Backport fix for CVE-2020-15503 from Fedora Resolves: 1853529 libsoup Tenable has extracted the preceding description block directly from the Oracle...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ppp vulnerability (USN-4451-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4451-1 advisory. Thomas Chauchefoin working with Trend Micros Zero Day Initiative, discovered that ppp incorrectly handled module loading. A local attacker...