139 matches found
CVE-2022-4598
creationtimestamp| type| source ---|---|--- 2022-12-18 14:40:41+00:00| seen| https://t.me/cibsecurity/54816...
CVE-2022-4598
A vulnerability has been found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/api/theme-edit/ of the component Announcement Handler. The manipulation of the argument Text/Mobile Text leads to cross site...
CVE-2022-4598
CVE-2022-4598 affects Shoplazza LifeStyle 1.1. The Announcement Handler’s /admin/api/theme-edit/ endpoint mishandles the Text/Mobile Text parameters, enabling remote cross-site scripting. Exploitation details are publicly disclosed (PoC available). Remediation guidance from PT-Security recommends...
Mageia: Security Advisory (MGASA-2015-0258)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : annobin (RHSA-2021:4598)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4598 advisory. Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's...
SUSE: Security Advisory (SUSE-SU-2015:1253-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2015:1253-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS : LibEtPan vulnerability (USN-4598-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4598-1 advisory. It was discovered that LibEtPan incorrectly handled STARTTLS when using IMAP, SMTP and POP3. A remote attacker could possibly use this issue to perform a response...
CVE-2019-4598
CVE-2019-4598 pertains to a SQL injection vulnerability in the IBM Sterling B2B Integrator Dashboard User Interface for Standard Edition, affecting versions 5.2.0.0 through 6.0.3.0. The underlying issue enables an attacker to send crafted SQL statements via the dashboard, with potential exposure ...
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1544)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4598-1 : python-django - security update
Simon Charette reported that the password reset functionality in Django, a high-level Python web development framework, uses a Unicode case-insensitive query to retrieve accounts matching the email address requesting the password reset. An attacker can take advantage of this flaw to potentially...
PHP 5.6.x < 5.6.10 Multiple Vulnerabilities
According to its banner, the version of PHP 5.6.x running on the remote web server is prior to 5.6.10. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist in the bundled Perl-Compatible Regular Expression PCRE library due to improper validatio...
SUSE SLES12 Security Update : php5 (SUSE-SU-2015:1253-1)
This security update of PHP fixes the following issues : Security issues fixed : - CVE-2015-4024 bnc931421: Fixed multipart/form-data remote DOS Vulnerability. - CVE-2015-4026 bnc931776: pcntlexec did not check path validity. - CVE-2015-4022 bnc931772: Fixed and overflow in ftpgenlist that result...
CVE-2017-4598
This CVE entry is rejected/not used; the candidate was in a CNA pool and not assigned to issues.
Race condition
Race condition in the ioctl implementation in the Samsung Graphics 2D driver aka /dev/fimg2d in Samsung devices with Android L5.0/5.1 allows local users to trigger memory errors by leveraging definition of g2dlock and g2dunlock lock macros as no-ops, aka SVE-2015-4598...
CVE-2015-7891
Race condition in the ioctl implementation in the Samsung Graphics 2D driver aka /dev/fimg2d in Samsung devices with Android L5.0/5.1 allows local users to trigger memory errors by leveraging definition of g2dlock and g2dunlock lock macros as no-ops, aka SVE-2015-4598...
CVE-2015-7891
Race condition in the ioctl implementation in the Samsung Graphics 2D driver aka /dev/fimg2d in Samsung devices with Android L5.0/5.1 allows local users to trigger memory errors by leveraging definition of g2dlock and g2dunlock lock macros as no-ops, aka SVE-2015-4598...
CVE-2015-7891
The CVE-2015-7891 issue is a local information/privilege escalation risk caused by a race condition in the ioctl implementation of Samsung's Graphics 2D driver (the /dev/fimg2d path). The root cause is the g2d_lock and g2d_unlock macros being defined as no-ops, enabling memory errors under Androi...
F5 Networks BIG-IP : PHP vulnerability (K17049)
PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls 1 a DOMDocument save method or 2 the GD imagepsloadfont function...