51 matches found
CVE-2020-4628
IBM Cloud Pak for Security CP4S 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369...
CVE-2020-4628
IBM Cloud Pak for Security (CP4S) versions 1.3.0.1 and 1.4.0.0 are affected by an information disclosure vulnerability where detailed browser error messages leak sensitive information. The root cause is exposure of internal details via error messages, which could enable further attacks. Remediati...
Ubuntu: Security Advisory (USN-4628-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Intel Microcode regression (USN-4628-2)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4628-2 advisory. USN-4628-1 provided updated Intel Processor Microcode. Unfortunately, that update prevented certain processors in the Intel Tiger Lake...
Oracle Linux 8 : libreoffice (ELSA-2020-4628)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4628 advisory. libcmis 0.5.2-1 - Related: rhbz1796893 update to 0.5.2 liborcus 0.14.1-1 - Related: rhbz1796893 update to 0.14.1 libreoffice 6.3.6.2-3.0.1 - Replace...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Intel Microcode vulnerabilities (USN-4628-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4628-1 advisory. Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine Easdon, Claudio Canella, and Daniel Gruss discovered that t...
Debian DSA-4628-1 : php7.0 - security update
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in information disclosure, denial of service or incorrect validation of path names. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
Security Bulletin: IBM InfoSphere Subscription Manager is affected by an Information Disclosure vulnerability CVE-2019-4628
Summary An Information Disclosure vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4628 DESCRIPTION: IBM InfoSphere Information Server could allow a remote attacker to obtain sensitive information due to incomplete filtering of user input...
CVE-2011-4628
TYPO3 core authentication bypass (CVE-2011-4628) affects TYPO3 pre-4.3.12, pre-4.4.9, and pre-4.5.4. A crafted request can bypass backend login authentication. Root cause: insecure authentication handling in TYPO3 backend. Impact: remote attacker could gain backend access. Remediation: upgrade to...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4628)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4628 advisory. - x86/mds: Add empty commit for CVE-2019-11091 Konrad Rzeszutek Wilk Orabug: 29721848 CVE-2019-11091 - x86/speculation/mds: Make mdsmitigation mutable...
CVE-2016-4628
The CVE-2016-4628 issue affects IOAcceleratorFamily on Apple devices (iOS before 9.3.3 and watchOS before 2.2.2). Root cause: a null pointer dereference was mitigated by improved validation. Impact: local users could read kernel memory or cause a denial of service via an out-of-bounds read. Remed...
CVE-2016-4628
IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read via unspecified vectors...
About the security content of watchOS 2.2.2
About the security content of watchOS 2.2.2 This document describes the security content of watchOS 2.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
CVE-2015-4628
CVE-2015-4628 describes an SQL injection in LimeSurvey (application/controllers/admin/questiongroups.php) affecting versions before 2.06+ Build 150618. The vulnerability allows a remote authenticated administrator to execute arbitrary SQL commands via the sid parameter. Connected sources consiste...
CVE-2014-4628
Dell EMC Isilon InsightIQ is vulnerable to a cross-site scripting (XSS) issue (CVE-2014-4628) in versions 2.x and 3.x prior to 3.1. The OpenVAS entry and EMC advisory indicate the flaw arises from unsanitized user input in the web interface, enabling injection of arbitrary HTML/script. Affected p...
CVE-2013-4628
The CVE-2013-4628 entry describes an information-disclosure flaw in Huawei Campus Switch devices (Quidway SPU boards S7700, S9300, S9700). The firewall module can allow remote authenticated users to access sensitive information in the high-priority security zone by leveraging access to the low-pr...
CVE-2010-4628
CVE-2010-4628 affects MyBB (MyBulletinBoard) prior to 1.4.12. A superfluous SQL COUNT call in member.php allows remote attackers to cause resource consumption by triggering scans of the entire users table, leading to DoS. The referenced sources indicate the vulnerability, with no explicit exploit...
CVE-2009-4628
SQL injection vulnerability in the TemplatePlaza.com TPDugg comtpdugg component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a tags action to index.php...
CVE-2009-4628
SQL injection vulnerability in the TemplatePlaza.com TPDugg comtpdugg component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a tags action to index.php...