Low: shadow-utils

Issue Overview: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve t...

CVE-2018-4641

Rejected reason: This candidate is unused by its CNA...

SUSE-SU-2023:3591-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...

SUSE: Security Advisory (SUSE-SU-2022:4641-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2022:4641-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4641-1 advisory. Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously...

CVE-2022-4641

creationtimestamp| type| source ---|---|--- 2022-12-22 00:13:17+00:00| seen| https://t.me/cibsecurity/55097...

CVE-2022-4641 pig-vector LogisticRegression.java LogisticRegression temp file

A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The attack needs to be approached locally. T...

CVE-2022-4641

CVE-2022-4641 affects the pig-vector project, specifically the LogisticRegression.java function in src/main/java/org/apache/mahout/pig/. The issue is described as manipulating the creation of an insecure temporary file, enabling a local attacker to exploit it. The vulnerability is tied to a patch...

Ubuntu: Security Advisory (USN-4641-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4641-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4641-1 : webkit2gtk - security update

The following vulnerability has been discovered in the webkit2gtk web engine : - CVE-2020-10018 Sudhakar Verma, Ashfaq Ansari and Siddhant Badhe discovered that processing maliciously crafted web content may lead to arbitrary code execution. C Tenable Network Security, Inc. The descriptive text a...

CVE-2017-4641

...

CVE-2017-4641

CVE-2017-4641 is rejected/not used per the Initial Description.

CVE-2016-4641

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion."...

CVE-2016-4641

CVE-2016-4641 affects the Login Window in Apple OS X prior to 10.11.6, enabling a crafted app leveraging a type confusion flaw to run arbitrary code in a privileged context or access sensitive user data. Apple’s security content associates this with the Login Window issue and notes remediation in...

Code injection

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...

CVE-2015-2865

CVE-2015-2865 is rejected/not used and does not represent an active vulnerability entry.

CVE-2015-4641

Affected: Samsung Galaxy S4, S4 Mini, S5, S6 with SwiftKey language-pack update. Vulnerability: Directory traversal in the SwiftKey language-pack update implementation that uses the skslm.swiftkey.net domain. Cause: crafted ZIP entry containing a .. path can be exploited to write to arbitrary fil...

CVE-2014-4641

CVE-2014-4641 entry is rejected/not used and does not represent an active vulnerability.

CVE-2010-4641

CVE-2010-4641 : The XWiki Enterprise vulnerability is an SQL injection in XWiki Enterprise before 2.5 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Multiple connected sources corroborate a similar issue affecting XWiki