CVE-2022-4452

CVE-2022-4452 affects Google Chrome’s crosvm component. Prior to 107.0.5304.62, insufficient data validation could enable a remote attacker to cause object corruption via a crafted HTML page. Impact is described as High (remote, no user privileges, high confidentiality/integrity/availability impa...

SUSE: Security Advisory (SUSE-SU-2022:4452-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4452

...

CVE-2016-4452

CVE-2016-4452 entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-4452

CVE-2018-4452 describes a memory consumption issue that could allow a malicious application to execute arbitrary code with system privileges on macOS components. Documented impact includes potential elevation of privileges. The issue is fixed in macOS updates: Mojave 10.14.3, Security Update 2019...

Ubuntu 20.04 LTS : libvirt vulnerability (USN-4452-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4452-1 advisory. Trent Shea working with Trend Micros Zero Day Initiative, discovered that the libvirt package set incorrect permissions on the UNIX domain socket. A local attacke...

CVE-2020-4452

CVE-2020-4452 affects IBM API Connect versions 2018.4.1.0–2018.4.1.11, where weak cryptographic algorithms could allow an attacker to decrypt highly sensitive information. Root cause: use of weaker-than-expected cryptography. Impact: disclosure of sensitive data. Remediation: IBM fixed in 2018.4....

Security Bulletin: IBM API Connect V 2018 (ova) is impacted by weak cryptographic algorithms (CVE-2020-4452)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4452 DESCRIPTION: IBM API Connect uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CVSS Base score: 5.9 CVSS Temporal...

Debian DSA-4452-1 : jackson-databind - security update

Multiple security issues were found in jackson-databind, a Java library to parse JSON and other data formats which could result in information disclosure or the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2018-4452

creationtimestamp| type| source ---|---|--- 2019-01-28 15:10:00+00:00| seen| MISP/5c4f1a2e-1300-4391-87cf-19c50a021402...

Apple Mac OS X Security Updates (HT209446)-04

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-4452

CVE-2017-4452 entry is rejected/not used and does not represent an active vulnerability.

Adobe Acrobat And Reader JavaScript API Code Execution (APSB15-15: CVE-2015-4452)

A Restrictions Bypass Privileged JavaScript API Execution Vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the use of trusted function which provides certain privileges that allows overwriting objects. A remote attacker can exploit this vulnerability by enticing the...

Design/Logic Flaw

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified...

CVE-2015-4452

CVE-2015-4452 affectsAdobe Reader and Acrobat 10.x (pre-10.1.15) and 11.x (pre-11.0.12), plus Acrobat/Reader DC Classic pre-2015.006.30060 and DC Continuous pre-2015.008.20082 on Windows and macOS. The issue is a bypass of JavaScript API execution restrictions, exploitable via unspecified vectors...

KLA10628 Multiple vulnerabilities in Adobe Acrobat

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

Apple iTunes < 12.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.2. It is, therefore, affected by multiple vulnerabilities in the bundled version of WebKit, including denial of service and arbitrary code execution vulnerabilities. Note that Nessus has not tested for these issues bu...

Apple TV < 7.0.2 Multiple Vulnerabilities

Binary data 8939.prm...

APPLE-SA-2014-12-2-1 Safari 8.0.1, Safari 7.1.1, and Safari 6.2.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2014-12-3-1 Safari 8.0.1, Safari 7.1.1, and Safari 6.2.1 Safari 8.0.1, Safari 7.1.1, and Safari 6.2.1 is now available and addresses the following: WebKit Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite...

APPLE-SA-2014-11-17-1 iOS 8.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...