96 matches found
CVE-2024-4456
CVE-2024-4456 affects Octopus Server. The vulnerability enables embedding a Cross-Site Scripting payload on the audit page for certain access levels. The connected sources do not provide a concrete root cause; they consistently reference an XSS on the audit page in affected Octopus Server release...
Tenda W9 安全漏洞
Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect manipulation of the parameter ssidIndex that can lead to a stack-based buffer overflow. No detailed vulnerability details are provided at...
CVE-2023-51099
Tenda W9 firmware version 1.0.0.7(4456) CN contains a command injection in the formexeCommand function. The issue stems from lack of neutralization of special elements in formexeCommand, potentially allowing a remote attacker to execute arbitrary code. The PT-security entry notes a temporary work...
Moderate: Red Hat Security Advisory: Logging Subsystem 5.6.11 - Red Hat OpenShift security update
Logging Subsystem 5.6.11 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Moderate: Red Hat Security Advisory: Logging Subsystem 5.5.16 - Red Hat OpenShift security update
Logging Subsystem 5.5.16 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Moderate: Red Hat Security Advisory: Logging Subsystem 5.7.6 - Red Hat OpenShift security update
Logging Subsystem 5.7.6 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the Referenc...
CVE-2023-4456
creationtimestamp| type| source ---|---|--- 2023-08-21 20:41:17+00:00| seen| https://t.me/cibsecurity/68901...
CVE-2023-4456
A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached...
CVE-2023-4456 Openshift-logging: lokistack authorisation is cached too broadly
A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached...
Debian: Security Advisory (DSA-1783-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-4456
creationtimestamp| type| source ---|---|--- 2022-12-13 20:21:56+00:00| seen| https://t.me/cibsecurity/54450...
CVE-2022-4456 falling-fruit cross site scripting
A vulnerability has been found in falling-fruit and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 15adb8e1ea1f1c3e3d152fc266071f621ef0c621. It is recommended to app...
CVE-2022-4456 falling-fruit cross site scripting
A vulnerability has been found in falling-fruit and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 15adb8e1ea1f1c3e3d152fc266071f621ef0c621. It is recommended to app...
CVE-2022-4456
CVE-2022-4456 affects the falling-fruit project and is described as a cross-site scripting vulnerability arising from manipulation of unknown code. The issue is exploitable remotely over a network; user interaction is required. A patch identified as 15adb8e1ea1f1c3e3d152fc266071f621ef0c621 is ava...
CVE-2013-4456
CVE-2013-4456 is rejected and not used; it does not represent an active vulnerability entry.
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Dovecot vulnerabilities (USN-4456-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4456-1 advisory. It was discovered that Dovecot incorrectly handled deeply nested MIME parts. A remote attacker could possibly use this issue to...
CVE-2019-4456
The CVE-2019-4456 issue affects IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6. Described vulnerability: XML External Entity Injection (XXE) when processing XML data, enabling a remote attacker to potentially disclose sensitive information or exhaust memory. Affected products ...
Debian DSA-4456-1 : exim4 - security update
The Qualys Research Labs reported a flaw in Exim, a mail transport agent. Improper validation of the recipient address in the delivermessage function may result in the execution of arbitrary commands. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...