RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 9 (RHSA-2023:7639)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7639 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

CVE-2018-4503

Rejected reason: This candidate is unused by its CNA...

SUSE: Security Advisory (SUSE-SU-2022:4503-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-4503

creationtimestamp| type| source ---|---|--- 2022-12-15 07:23:14+00:00| seen| https://t.me/cibsecurity/54594...

CVE-2022-4503

CVE-2022-4503 refers to a generic Cross-site Scripting (XSS) vulnerability in OpenEMR/OpenEMR prior to version 7.0.0.2. Affected product: OpenEMR/OpenEMR (GitHub repository openemr/openemr). Root cause details are not provided in the primary document set, but related sources consistently describe...

CVE-2022-4503 Cross-site Scripting (XSS) - Generic in openemr/openemr

Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.0.2...

CVE-2022-4503 Cross-site Scripting (XSS) - Generic in openemr/openemr

Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.0.2...

Ubuntu: Security Advisory (USN-4503-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : Perl DBI module vulnerability (USN-4503-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4503-1 advisory. It was discovered that Perl DBI module incorrectly handled certain calls. An attacker could possibly use this issue to execute arbitrary code. Tenable...

CVE-2020-4503

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182283...

CVE-2020-4503

CVE-2020-4503 affects IBM Planning Analytics Local 2.0 (Planning Analytics Workspace). Root cause is cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript and potentially disclose credentials in a trusted session. The connected IBM bulletin confirms release 53 fixes f...

NewStart CGSL CORE 5.04 / MAIN 5.04 : chrony Multiple Vulnerabilities (NS-SA-2020-0027)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has chrony packages installed that are affected by multiple vulnerabilities: - Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service crash via a crafted 1...

Debian DSA-4503-1 : golang-1.11 - security update (Ping Flood) (Reset Flood)

Three vulnerabilities have been discovered in the Go programming language; 'net/url' accepted some invalid hosts in URLs which could result in authorisation bypass in some applications and the HTTP/2 implementation was susceptible to denial of service. C Tenable Network Security, Inc. The...

CVE-2017-4503

CVE-2017-4503 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4503

The CVE-2016-4503 issue affects Moxa Device Server Web Console 5232-N. The vulnerability is an authentication bypass where an attacker can identify an authenticated UserId from a cookie parameter and gain access to change settings and data remotely. Impact is high: possible unauthorized modificat...

openSUSE: Security Advisory for seamonkey (openSUSE-SU-2015:1681-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4503

CVE-2015-4503 affects Mozilla Firefox before 41.0. The issue arises in the TCP Socket API implementation where array boundaries are mishandled during navigator.mozTCPSocket.open and subsequent send calls, allowing a remote TCP server to read packet data from a process’s memory (via the Firefox OS...

openSUSE Security Update : phpMyAdmin (openSUSE-SU-2014:1069-1)

This phpMyAdmin update addresses several security and non security issues : - This is a phpMyAdmin version upgrade bnc892401: From 4.1.14.3 : - sf4501 security XSS in table browse page CVE-2014-5273 - sf4502 security Self-XSS in enum value editor CVE-2014-5273 - sf4503 security Self-XSSes in...

CVE-2014-4503

The parsenotify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service application exit via a crafted 1 bbversion, 2 prevhash, 3 nbit, or 4 ntime parameter in a mining.notify action stratum message...

CVE-2014-4503

The CVE-2014-4503 issue affects the mining software sgminer (before 4.2.2) and cgminer (3.3.0 through 4.0.1). The vulnerability resides in parse_notify within util.c, enabling man-in-the-middle attackers to trigger a denial of service (application exit) via crafted parameters (bbversion, prev_has...