Lucene search
+L

116 matches found

Circl
Circl
added 2024/03/12 3:11 p.m.6 views

CVE-2019-4560

creationtimestamp| type| source ---|---|--- 2024-03-12 15:11:31+00:00| seen| https://t.me/ctinow/205734...

6.5CVSS6.1AI score0.01055EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/11/27 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2023:4560-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.0119EPSS
SaveExploits4References7
Circl
Circl
added 2023/08/28 7:27 a.m.6 views

CVE-2023-4560

creationtimestamp| type| source ---|---|--- 2023-08-28 07:27:25+00:00| seen| https://t.me/cibsecurity/69269...

6.5CVSS6.2AI score0.00592EPSS
SaveExploits1References1
NVD
NVD
added 2023/08/28 1:15 a.m.43 views

CVE-2023-4560

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...

6.5CVSS6.5AI score0.00592EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/08/28 12:0 a.m.12 views

CVE-2023-4560 Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...

6.5CVSS6.8AI score0.00592EPSS
SaveExploits1References2
CVE
CVE
added 2023/08/28 12:0 a.m.120 views

CVE-2023-4560

The CVE-2023-4560 issue affects Omeka-S (GitHub: omeka/omeka-s) prior to version 4.0.4, caused by improper authorization of an index containing sensitive information. The vulnerability exposes high confidentiality impact with a CVSS base score of 6.5 (NETWORK, LOW attack complexity, LOW privilege...

6.5CVSS6.5AI score0.00592EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/08/28 12:0 a.m.41 views

CVE-2023-4560 Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...

6.5CVSS6.7AI score0.00592EPSS
SaveExploits1References2
F5 Networks
F5 Networks
added 2023/02/21 6:26 p.m.30 views

K7985: ClamAV clamav-milter vulnerability - CVE-2007-4560

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

7.6CVSS6.9AI score0.83539EPSS
SaveExploits13
CVE
CVE
added 2022/12/16 12:0 a.m.92 views

CVE-2022-4560

CVE-2022-4560 affects Joget up to version 7.0.31 in the wflow-core component. The vulnerability arises in the function getInternalJsCssLib of the file UniversalTheme.java where manipulating the key argument enables cross-site scripting. The issue can be remotely initiated. A fix is available in v...

6.1CVSS4.8AI score0.00529EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.22 views

Slackware: Security Advisory (SSA:2012-341-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.12849EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/22 7:27 p.m.25 views

Security Bulletin: InstallAnywhere generates installation executables which are vulnerable to a DLL-planting vulnerability (CVE-2016-4560)

Summary Flexera InstallAnywhere, shipped and used by IBM Spectrum Control and Tivoli Storage Productivity Center, could allow a local attacker to gain elevated privileges on the system by using a Trojan horse DLL in the current working directory of a setup-launcher. Vulnerability Details CVEID:...

7.8CVSS0.5AI score0.00537EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/10/02 12:0 a.m.35 views

Ubuntu 18.04 LTS : Gon gem vulnerability (USN-4560-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4560-1 advisory. It was discovered that Gon gem did not properly escape certain input. An attacker could use this vulnerability to execute a cross-site scripting XSS attack. Tenab...

6.1CVSS6.7AI score0.01376EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/03 1:15 p.m.8 views

CVE-2020-4560

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.1CVSS5.5AI score0.00852EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/31 2:35 p.m.15 views

Security Bulletin: Financial Transaction Manager for High Value Payments is affected by a potential Cross-Site Scripting (Reflected) vulnerability (CVE-2020-4560)

Summary This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details CVEID: CVE-2020-4560 DESCRIPTION: IBM Financial Transaction Manager is...

6.1CVSS6.2AI score0.00852EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/24 10:49 p.m.17 views

Security Bulletin: IBM Sterling Connect:Direct FTP+ for Windows installers are vulnerable to attack (CVE-2016-4560)

Summary IBM Sterling Connect:Direct FTP+ for Windows installers are vulnerable to attack under certain conditions. Vulnerability Details CVEID: CVE-2016-4560 DESCRIPTION: Flexera InstallAnywhere could allow a remote attacker to execute arbitrary code on the system. The application does not direct...

7.8CVSS2.4AI score0.00537EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/03/23 8:41 p.m.20 views

Security Bulletin: IBM WebSphere Installer used by WebSphere Message Broker, IBM Integration Bus, IBM Integration Bus Healthcare Pack, Manufacturing Pack, and Retail Pack is susceptible to DLL-planting vulnerability (CVE-2016-4560)

Summary The Windows graphical user interface installer setup.exe used by WebSphere Message Broker, IBM Integration Bus, IBM Integration Bus Healthcare Pack, IBM Integration Bus Manufacturing Pack, and IBM Integration Bus Retail Pack, is susceptible to a DLL-planting vulnerability, where a malicio...

7.8CVSS0.5AI score0.00537EPSS
SaveExploits1Affected Software5
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/20 8:47 a.m.24 views

Security Bulletin: IBM MQ and IBM MQ Appliance are vulnerable to a denial of service attack caused by an abend while processing messages. (CVE-2019-4560)

Summary An issue was found within the IBM MQ message processing code that results in an abend while processing a message that was placed on a queue using MQPUT. An attacker could use this to execute a denial of service attack on a queue manager. Vulnerability Details CVEID: CVE-2019-4560...

6.5CVSS0.7AI score0.01055EPSS
SaveExploits0Affected Software2
CVE
CVE
added 2019/12/16 3:45 p.m.63 views

CVE-2019-4560

CVE-2019-4560 affects IBM MQ and IBM MQ Appliance (versions 8.0; 9.0 LTS; 9.1 CD/LTS). The vulnerability is a denial-of-service caused by channels processing poorly formatted messages, enabling a DoS on queue managers. Exploitation details are not provided beyond the DoS impact in vendor/NVD note...

6.5CVSS6.2AI score0.01055EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/11/07 12:0 a.m.44 views

Debian DSA-4560-1 : simplesamlphp - security update

It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, it was possible to circumvent XML signature verification on SAML messages. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

8.8CVSS7.8AI score0.03024EPSS
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
added 2018/08/09 4:20 a.m.12 views

Security Bulletin: Current Releases of IBM® SDK for Node.js™ are affected by CVE-2016-4560

Summary IBM SDK for Node.js installation executables on the Windows platform are affected by CVE-2016-4560 Vulnerability Details CVEID: CVE-2016-4560 DESCRIPTION: Flexera InstallAnywhere could allow a local attacker to gain elevated privileges on the system, caused by an untrusted search path. An...

7.8CVSS0.8AI score0.00537EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder