CVE-2017-4613

...

CVE-2016-4613

CVE-2016-4613 affects Apple WebKit components in Safari (<10.0.1), iCloud (<6.0.1), iTunes (<12.5.2), and tvOS (

About the security content of Safari 10.0.1 - Apple Support

For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, see the Apple Product Security...

macOS : Apple Safari < 10.0.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X or macOS host is prior to 10.0.1. It is, therefore, affected by multiple vulnerabilities in WebKit : - An unspecified flaw exists in state management due to improper validation of user-supplied input. An unauthenticated, remote attacker...

Apple iTunes < 12.5.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.5.2. It is, therefore, affected by multiple vulnerabilities : - A cross-origin bypass vulnerability exists in WebKit due to improper handling of the location attribute. An unauthenticated, remote attacker can exploit...

Apple TV < 10.0.1 Multiple Vulnerabilities

Binary data 9757.prm...

About the security content of iTunes 12.5.2 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of Safari 10.0.1

About the security content of Safari 10.0.1 This document describes the security content of Safari 10.0.1. For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are list...

CVE-2015-4613

SQL injection vulnerability in the backend module in the Developer Log devlog extension before 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4613

TYPO3 Developer Log (devlog) extension, affected before version 2.11.4, contains a SQL injection vulnerability in the backend module that allows remote editors to execute arbitrary SQL commands via unspecified vectors. Multiple sources corroborate the vulnerability details but do not provide expl...

Xorg 1.4 to 1.11.2 File Permission Change PoC

No description provided by source. / xchmod.c -- Xorg file permission change vulnerability PoC Author: vladz http://vladz.devzero.fr Date: 2011/12/15 Software: www.x.org Version: Xorg 1.4 to 1.11.2 in all configurations. Xorg 1.3 and earlier if built with the USECHMOD preprocessor identifier Test...

Canon PIXMA Printer Administration Authentication Bypass

The remote printer contains a flaw that could allow a remote attacker to obtain sensitive information. The HTTP admin interface does not require credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73375;...

CVE-2011-4613

The X.Org X wrapper xserver-wrapper.c in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY...

CVE-2011-4613

The CVE-2011-4613 issue affects the X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux, where input TTY verification can bypass access restrictions by misinterpreting stdin as the console TTY. This is a local vulnerability that could allow bypassing restrictions during X sta...

CVE-2013-4613

The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has...

CVE-2013-4613

CVE-2013-4613 affects Canon printers MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922, where the administrative interface ships with a default unauthenticated state. The vulnerability enables remote attackers on the network to modify configuration via the Advanced page due to ...

CVE-2013-4613

The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has...

CVE-2012-4613

The CVE-2012-4613 entry concerns EMC RSA Data Protection Manager Appliance 2.7.x and 3.x prior to 3.2.1. The vulnerability is an improper restriction of authentication attempts, enabling local brute-force-style bypass of authentication. Affected component is the authentication mechanism; root cau...

Debian DSA-2364-1 : xorg - incorrect permission check

The Debian X wrapper enforces that the X server can only be started from a console. 'vladz' discovered that this wrapper could be bypassed. The oldstable distribution lenny is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

[SECURITY] [DSA 2364-1] xorg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2364-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2011 http://www.debian.org/security/faq -...