74 matches found
CVE-2022-4640
Mingsoft MCMS 5.2.9 is affected; the vulnerability resides in the save function of the Article Handler, enabling cross-site scripting. Reports indicate remote exploitation with a public exploit; upgrade to a newer component version is recommended. If needed, a temporary workaround from PT-Securit...
CVE-2020-4640
Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensitive information in the URL fragment identifiers. This information can be cached in the intermediate nodes like proxy servers, cdn, logging platforms, etc. An attacker can make u...
CVE-2020-4640
IBM API Connect is affected by CVE-2020-4640 for configurations of IBM API Connect 10.0.0.0ā10.0.1.0 and 2018.4.1.0ā2018.4.1.13, which can leak sensitive data in URL fragment identifiers cached by intermediaries. The IBM security bulletin lists affected versions and that remediation is available:...
Security Bulletin: IBM API Connect is vulnerable to sensitive information leak (CVE-2020-4640)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4640 DESCRIPTION: Certain IBM API Connect configurations can result in sensitive information in the URL fragment identifiers. This information can be cached in the intermediate nodes like prox...
Ubuntu: Security Advisory (USN-4640-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-4640-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4640-1 : graphicsmagick - security update
This update fixes several vulnerabilities in Graphicsmagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed media files are processed. C Tenable Network Securit...
CVE-2019-4640
IBM Security Secret Server (all versions) is affected by CVE-2019-4640 due to processing patches, image backups and other updates without proper verification of origin/integrity, which could allow execution of malicious code. The IBM security bulletin confirms the issue and provides a remediation...
Security Bulletin: A Security Vulnerability Has Been Identified In IBM Security Secret Server (CVE-2019-4640)
Summary A security vulnerability identified on IBM Security Secret Server has been addressed in the release 10.7.000059. Vulnerability Details CVEID: CVE-2019-4640 DESCRIPTION: IBM Security Secret Server processes patches, image backups and other updates without sufficiently verifying the origin...
CVE-2017-4640
CVE-2017-4640 is rejected/not used and does not represent an active vulnerability entry.
GLSA-201610-04 : libgcrypt: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201610-04 libgcrypt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libgcrypt. Please review the CVE identifiers referenced below for details. Impact : Side-channel attacks can leak private key...
CVE-2016-4640
CVE-2016-4640 corresponds to a Login Window vulnerability in OS X El Capitan v10.11.x (pre-10.11.6) where a crafted application can cause memory corruption, leading to arbitrary code execution in a privileged context, or disclosure of user information, or a denial of service. Appleās security con...
CVE-2015-4640
The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...
Code injection
The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...
CVE-2015-2865
CVE-2015-2865 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-4640
The CVE-2015-4640 entry relates to Samsung Galaxy S4/S4 Mini/S5/S6 devices where the SwiftKey language-pack updater uses HTTP to contact skslm.swiftkey.net. This enables man-in-the-middle attackers to modify HTTP responses and write to language-pack files. Connected documents corroborate this vul...
