UBUNTU-CVE-2023-4638

Unknown description...

CVE-2023-4638

Unknown description...

CVE-2023-4638

Removed by vendor...

GitLab 13.3 < 16.1.5 / 16.2 < 16.2.5 / 16.3 < 16.3.1 (CVE-2023-4638)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.3 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due ...

CVE-2022-4638

creationtimestamp| type| source ---|---|--- 2022-12-22 00:13:15+00:00| seen| https://t.me/cibsecurity/55094...

CVE-2022-4638 collective.contact.widget widgets.py title cross site scripting

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the...

CVE-2022-4638

CVE-2022-4638 affects the Collective project’s add‑on collective.contact.widget (up to v1.12). The vulnerability resides in the title function of src/collective/contact/widget/widgets.py and enables cross‑site scripting (XSS). It can be triggered remotely. The patch referenced to fix this issue i...

Ubuntu 20.10 : c-ares vulnerability (USN-4638-1)

The remote Ubuntu 20.10 host has packages installed that are affected by a vulnerability as referenced in the USN-4638-1 advisory. c-ares could be made to denial of service if it received a specially crafted DNS request. Tenable has extracted the preceding description block directly from the Ubun...

Oracle Linux 8 : sysstat (ELSA-2020-4638)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-4638 advisory. 11.7.3-5 - Rebuild 11.7.3-4 - Package onboarded to gating 11.7.3-3 - Fix memory corruption bug due to integer overflow 1790608 Tenable has extracted the precedi...

Security Bulletin: IBM API Connect's API Manager is vulnerable to privilege escalation(CVE-2020-4638)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4638 DESCRIPTION: IBM API Connect's API Manager is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link...

CVE-2020-4638

CVE-2020-4638 affects IBM API Connect’s API Manager (versions 2018.4.1.0–2018.4.1.12). A privilege-escalation flaw allows an invitee to an API Provider organization to gain higher privileges by manipulating the invitation link. The IBM bulletin notes remediation: address in IBM API Connect V2018....

Debian DSA-4638-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2019-19880 Richard Lorenz discovered an issue in the sqlite library. - CVE-2019-19923 Richard Lorenz discovered an out-of-bounds read issue in the sqlite library. - CVE-2019-19925 Richard Lorenz discovered an issue in...

CVE-2019-4638

CVE-2019-4638 affects IBM Security Secret Server. The issue is that 10.x tokens/cookies used for authorization are not marked Secure, enabling potential exposure of sensitive data via man-in-the-middle if cookies are transmitted over non-HTTPS connections. Affected product: IBM Security Secret Se...

Security Bulletin: A Security Vulnerability Has Been Identified In IBM Security Secret Server (CVE-2019-4638)

Summary A security vulnerability identified on IBM Security Secret Server has been addressed in the release 10.7.000059. Vulnerability Details CVEID: CVE-2019-4638 DESCRIPTION: IBM Security Secret Server does not set the secure attribute on authorization tokens or session cookies. This could allo...

CVE-2017-4638

...

CVE-2017-4638

CVE-2017-4638 is rejected/not used per the initial description.

Sql injection

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and ZDI-CAN-4638...

CVE-2016-4638

Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."...

CVE-2016-4638

CVE-2016-4638 corresponds to a local privilege-escalation in the OS X Login Window prior to OS X 10.11.6. Multiple connected sources attribute the flaw to a type-confusion in WindowServer/CoreGraphics handling of user-supplied data, enabling a crafted app to gain root-level/privilege access. Expl...

CVE-2015-4638

The CVE-2015-4638 issue affects F5 BIG-IP products using FastL4 virtual servers (across BIG-IP LTM/AAM/AFM/Analytics/APM/ASM/GTM/Link Controller/PEM, Edge Gateway, WebAccelerator, WOM, PSM). Root cause: processing of fragmented packets in the FastL4/TMM path can cause the Traffic Management Micro...