63 matches found
CVE-2019-4596
CVE-2019-4596 affects IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–5.2.6.5) and the Dashboard Web UI, where a stored/reflected cross-site scripting vulnerability allows embedding arbitrary JavaScript that can alter UI behavior and potentially leak credentials within a trusted se...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4596)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4596 advisory. - can: gw: ensure DLC boundaries after CAN frame modification Oliver Hartkopp Orabug: 29215299 CVE-2019-3701 CVE-2019-3701 - CIFS: Enable encryptio...
CVE-2017-4596
CVE-2017-4596 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-4596
Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges...
CVE-2015-4596
The CVE-2015-4596 issue affects Lenovo Mouse Suite prior to version 6.73. A local user can escalate privileges to Administrator, with the ability to run arbitrary code. The root cause is not explicitly detailed in the supplied documents, but multiple sources confirm the impact and version-bound n...
Lenovo Mouse Suite Escalation of Privileges
Lenovo Security Advisory: LEN-2015-066 Potential Impact: Escalation of Privileges Severity: High Summary: A user with local privileges may be able to run files as an administrator in Lenovo Mouse Suite included with ThinkPad Precision Wireless Mouse –part number 0B47161. Description: The Lenovo...
Lenovo Mouse Suite Escalation of Privileges - Lenovo Support US
No description provided...
CVE-2016-4602
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4600...
CVE-2016-4596
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602...
CVE-2016-4596
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602...
CVE-2016-4596
The connected Apple security content confirms CVE-2016-4596 affects QuickTime in OS X El Capitan v10.11 and later, via a crafted FlashPix bitmap image, leading to memory corruption that could allow remote code execution or a denial of service. The underlying software component implicated is Quick...
CVE-2016-4596
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602...
CVE-2016-4597
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4600, and CVE-2016-4602...
Lenovo Mouse Suite < 6.73 Local Privilege Elevation
The version of Lenovo Mouse Suite installed on the remote Windows host is prior to 6.73. It is, therefore, affected by a privilege elevation vulnerability that can allow a local attacker to gain administrative privileges on the system. Note that Nessus has not tested for this issue but has instea...
CVE-2014-4596
Multiple cross-site scripting XSS vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 msg or 2 act parameter...
CVE-2014-4596
The CVE-2014-4596 entries describe multiple XSS vulnerabilities in the WordPress plugin SnapApp (plugin version ≤ 1.5) within the file js/button-snapapp.php . The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the msg or act parameters. The NVD/NVD-de...
CVE-2013-4596
The Node Access Keys module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote attackers to bypass access restrictions via a node listing...
CVE-2013-4596
The CVE-2013-4596 entry concerns Drupal’s Node Access Keys module (7.x-1.x) prior to 7.x-1.1. The vulnerability arises from insufficient permission checks, allowing remote attackers to bypass access restrictions via a node listing. Affected version: Node Access Keys 7.x-1.0 (Drupal 7). The issue ...