Malicious code in wlwz-2312-4601 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5324d3c85ab4f0cd95ff3a8724afee7fafe9823ae0cfeb2bb3cf40e1fc87344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-4601

creationtimestamp| type| source ---|---|--- 2023-10-19 00:33:54+00:00| seen| https://t.me/cibsecurity/72538...

CVE-2023-4601

CVE-2023-4601 describes a stack-based buffer overflow in NI System Configuration, affecting 2023 Q3 and earlier versions. The vulnerability arises in parsing/handling of response data, allowing an attacker to cause information disclosure or arbitrary code execution. Public sources in connected do...

CVE-2023-4601 Stack-based Buffer Overflow in NI System Configuration Software

A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and a...

CVE-2018-4601

Rejected reason: This candidate is unused by its CNA...

Debian: Security Advisory (DLA-307-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-4601

creationtimestamp| type| source ---|---|--- 2022-12-18 14:40:42+00:00| seen| https://t.me/cibsecurity/54817...

CVE-2022-4601

A vulnerability was found in Shoplazza LifeStyle 1.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/api/theme-edit/ of the component Shipping/Member Discount/Icon. The manipulation leads to cross site scripting. The attack can be initiated remotel...

CVE-2022-4601

CVE-2022-4601 : Shoplazza LifeStyle 1.1 contains a cross-site scripting vulnerability in the component Shipping/Member Discount/Icon, affecting unknown code in /admin/api/theme-edit/. The vulnerability can be triggered remotely and the exploit has been disclosed publicly (VDB-216196). Several sou...

SUSE: Security Advisory (SUSE-SU-2015:1253-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:1253-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS : pip vulnerability (USN-4601-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4601-1 advisory. It was discovered that pip did not properly sanitize the filename during pip install. A remote attacker could possible use this issue to read and write arbitrary...

gallery.4601.us Cross Site Scripting vulnerability OBB-1368254

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2019-4601

CVE-2019-4601 describes an information-disclosure vulnerability in IBM Quality Manager (RQM) affecting versions 6.02, 6.06, and 6.0.6.1. An authenticated user could obtain sensitive information from a stack trace, aiding potential follow-on attacks. The connected sources corroborate this vulnerab...

Security Bulletin: Multiple vulnerabilities affect IBM Quality Manager (RQM)

Summary There are multiple vulnerabilities that affect IBM Quality Manager RQM Vulnerability Details CVEID: CVE-2019-4602 DESCRIPTION: IBM Quality Manager RQM is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...

Debian DSA-4601-1 : ldm - security update

It was discovered that a hook script of ldm, the display manager for the Linux Terminal Server Project, incorrectly parsed responses from an SSH server, which could result in local root privilege escalation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4601)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4601 advisory. - ext4: verify the depth of extent tree in ext4findextent Theodore Ts'o Orabug: 29396714 CVE-2018-10877 CVE-2018-10877 Tenable has extracted the...

CVE-2017-4601

CVE-2017-4601 is rejected/not used as stated in the Initial Description.

CVE-2016-4601

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted SGI image...

CVE-2016-4601

CVE-2016-4601 affects QuickTime on OS X El Capitan v10.11 (and later). A memory corruption issue in QuickTime can be triggered by a crafted SGI image, allowing remote code execution or a denial of service. Apple’s security content for OS X El Capitan v10.11.6 (Security Update 2016-004) addresses ...