CVE-2018-4460

CVE-2018-4460 affects Apple platforms (iOS, macOS Mojave, tvOS, watchOS) prior to 12.1.1. The issue is a denial-of-service in the Kernel resolved by removing the vulnerable code; Apple’s security content notes the patch/update comes with iOS 12.1.1 and corresponding macOS/tvOS/watchOS updates. Th...

About the security content of watchOS 5.1.2

About the security content of watchOS 5.1.2 This document describes the security content of watchOS 5.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2017-4460

CVE-2017-4460 is rejected/not used per the initial description; this entry does not represent an active vulnerability.

CVE-2017-4460

...

CVE-2016-4460

Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication...

CVE-2016-4460

Apache Pony Mail versions 0.6c through 0.8b are affected by a vulnerability that allows remote attackers to bypass authentication. The reports consolidate this as a security bypass without detailing the underlying root cause in the provided documents. No remediation steps, patch versions, or expl...

CVE-2015-4460

Cross-site request forgery CSRF vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 r19171 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via certain vectors...

CVE-2015-4460

CVE-2015-4460 describes a Cross‑Site Request Forgery (CSRF) in B.A.S C2Box prior to 4.0.0 (r19171) that lets an unauthenticated attacker hijack an administrator’s session to add an admin account via SecuritySetting/UserSecurity/UserManagement.aspx, potentially compromising the domain. Connected s...

CVE-2015-4460

Cross-site request forgery CSRF vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 r19171 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via certain vectors...

Debian DSA-3120-1 : mantis - security update

Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

Debian Security Advisory DSA 3120-1 (mantis - security update)

Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. OpenVAS Vulnerability Test $Id: deb3120.nasl 6609 2017-07-07 12:05:59Z...

Fedora Update for mantis FEDORA-2014-16504

Check the version of mantis SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868624";...

Fedora Update for mantis FEDORA-2014-15079

Check the version of mantis SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868569";...

APPLE-SA-2014-11-17-1 iOS 8.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...

CVE-2014-4460

CVE-2014-4460 affects CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1. The root issue is that private-browsing transitions do not properly clear the browsing cache, enabling physically proximate attackers to read cached data. The vulnerability is tracked publicly with a low CVSS score...

Fedora Update for mantis FEDORA-2014-12165

Check the version of mantis SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868393";...

Fedora Update for mantis FEDORA-2014-3440

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4460

Cross-site scripting XSS vulnerability in accountsponsorpage.php in MantisBT 1.0.0 through 1.2.15 allows remote authenticated users to inject arbitrary web script or HTML via a project name...

CVE-2013-4460

CVE-2013-4460: XSS in MantisBT 1.0.0–1.2.15 via project name in account_sponsor_page.php. Remote authenticated users could inject arbitrary web script/HTML. CVSS v2 base score 3.5 (LOW). No exploitation details provided in the connected documents. No remediation/version_fix information is specifi...

Fedora Update for mantis FEDORA-2013-20202

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...