73 matches found
Exploit for Use of Hard-coded Credentials in Clickstudios Passwordstate
CVE-20...
K15513: LZ4 vulnerability CVE-2014-4611
Security Advisory Description Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4uncompress function in lib/lz4/lz4decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial ...
SUSE CVE-2014-4611
Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4uncompress function in lib/lz4/lz4decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service memory corruption o...
CVE-2022-4611
creationtimestamp| type| source ---|---|--- 2022-12-19 18:11:37+00:00| seen| https://t.me/cibsecurity/54886 2023-07-06 18:42:12+00:00| published-proof-of-concept| https://t.me/anonymoussecures/1284 2023-07-06 18:42:13+00:00| published-proof-of-concept| https://t.me/anonymoussecures/432 2023-07-06...
CVE-2022-4611
CVE-2022-4611 affects Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Vulnerability details in the provided documents indicate a manipulation that results in hard-coded credentials in an unspecified part of the product, with remote initiation possible and public disclosure...
com.github.jonathanswenson:bqjdbc (>=2.2.11 <=2.2.12), com.moz.fiji.hive:fiji-hive-lib (>=0.1.0 <=0.1.9) +62 more potentially affected by CVE-2009-4611 via org.mortbay.jetty:jetty (>=7.0.0pre0 <=7.0.0.pre5)
org.mortbay.jetty:jetty MAVEN version =7.0.0pre0, =2.2.11, =0.1.0, =0.1.18, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.18, =0.1.18, =0.1.18, =0.1.18, =0.1.18, =3.0.0, =3.0.1 and more Source cves: CVE-2009-4611 Source advisory: OSV:GHSA-6JXP-7G74-2RC3...
Mageia: Security Advisory (MGASA-2014-0321)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4611-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Samba vulnerabilities (USN-4611-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4611-1 advisory. Steven French discovered that Samba incorrectly handled ChangeNotify permissions. A remote attacker could possibly use this issue...
CVE-2020-4611
IBM Data Risk Manager (iDNA) 2.0.6 is reported to allow an authenticated user to bypass security and perform actions reserved for admins. The entry notes this as a vulnerability in the product, with IBM’s remediation path recommending upgrading to v2.0.6.4 and then applying subsequent fixpacks (2...
Debian: Security Advisory (DSA-4611-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1536)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4611
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168519...
CVE-2009-5047
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-4611. Reason: This candidate is a duplicate of CVE-2009-4611. Notes: All CVE users should reference CVE-2009-4611 rather than this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2009-5047
CVE-2009-5047 is a Jetty remote code execution vulnerability caused by a command-injection flaw in the Cookie Dump Servlet and HTTP Content-Length header. The initial record marks this CVE as a duplicate/rejected entry, but connected documents provide concrete details for Jetty (versions around 6...
CVE-2017-4611
This CVE entry is rejected/not used per description; it does not represent an active vulnerability.
CVE-2016-4611
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4730, CVE-2016-4733, CVE-2016-4734, and CVE-2016-4735...
CVE-2016-4611
CVE-2016-4611 affects WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. The description does not provide affected product versions beyond...
wrike.com XSS vulnerability
Vulnerable URL: https://www.wrike.com/blog/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| Yes, at 05.01.2017 Latest check for patch:| 05.01.2017 15:12 GMT Vulnerability type:| XSS Vulnerability status:|...