101 matches found
Debian: Security Advisory (DLA-478-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-4556
creationtimestamp| type| source ---|---|--- 2022-12-16 20:24:41+00:00| seen| https://t.me/cibsecurity/54771 2025-08-05 15:00:06+00:00| published-proof-of-concept| Telegram/pjCdkaPYm9FkTnXxup4bFVUrTLP1VgX6gwOCGLnwxjPbRGw 2025-08-07 21:02:24+00:00| seen|...
CVE-2022-4556
CVE-2022-4556 affects Alinto SOGo up to version 5.7.1. The vulnerability resides in Identity Handler’s function _migrateMailIdentities in SoObjects/SOGo/SOGoUserDefaults.m, where manipulating the fullName argument enables a stored cross-site scripting (XSS) condition. The issue can be triggered r...
CVE-2022-4556 Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting
A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting...
August 9, 2022—KB5016683 (Security-only update)
None None...
July 27, 2021—KB5005394 (OS Build 17763.2091) Out-of-band
None None...
July 13, 2021—KB5004285 (Security-only update)
None None...
July 13, 2021—KB5004307 (Security-only update)
None None...
SUSE: Security Advisory (SUSE-SU-2016:1996-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:2008-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : netqmail vulnerabilities (USN-4556-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4556-1 advisory. It was discovered that netqmail did not properly handle certain input. Both remote and local attackers could use this vulnerability to cause netqmail to...
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2016-1025)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4556
IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 166205...
CVE-2019-4556
CVE-2019-4556 affects IBM QRadar Advisor With Watson. Affected versions are 1.0.0–2.4.0; root cause is incomplete input validation due to insufficient input-length controls (incomplete blacklisting), allowing bypass of application controls and impacting system and data integrity. Remediation avai...
Debian DSA-4556-1 : qtbase-opensource-src - security update
An out-of-bounds memory access was discovered in the Qt library, which could result in denial of service through a text file containing many directional characters. The oldstable distribution stretch is not affected. C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2019-14844
A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC...
CVE-2019-14844
A flaw was found in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC...
Denial Of Service (DoS)
Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third-party, the Key Distribution Center KDC. When a client attempts to use PKINIT to obtain credentials from the KDC, the client can specify, using ...
Denial Of Service (DoS)
Red Hat Certificate System RHCS is an enterprise software system designed to manage enterprise Public Key Infrastructure PKI deployments. Multiple cross-site scripting flaws were discovered in the Red Hat Certificate System. An attacker could use these flaws to perform a cross-site scripting XSS...
Denial Of Service (DoS)
Red Hat Certificate System RHCS is an enterprise software system designed to manage enterprise Public Key Infrastructure PKI deployments. Multiple cross-site scripting flaws were discovered in the Red Hat Certificate System. An attacker could use these flaws to perform a cross-site scripting XSS...