128 matches found
CVE-2018-4641
Rejected reason: This candidate is unused by its CNA...
SUSE-SU-2023:3591-1 Security update for shadow
This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...
SUSE: Security Advisory (SUSE-SU-2022:4641-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2022:4641-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4641-1 advisory. Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously...
CVE-2022-4641
creationtimestamp| type| source ---|---|--- 2022-12-22 00:13:17+00:00| seen| https://t.me/cibsecurity/55097...
CVE-2022-4641 pig-vector LogisticRegression.java LogisticRegression temp file
A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The attack needs to be approached locally. T...
CVE-2022-4641
CVE-2022-4641 affects the pig-vector project, specifically the LogisticRegression.java function in src/main/java/org/apache/mahout/pig/. The issue is described as manipulating the creation of an insecure temporary file, enabling a local attacker to exploit it. The vulnerability is tied to a patch...
Ubuntu: Security Advisory (USN-4641-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-4641-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4641-1 : webkit2gtk - security update
The following vulnerability has been discovered in the webkit2gtk web engine : - CVE-2020-10018 Sudhakar Verma, Ashfaq Ansari and Siddhant Badhe discovered that processing maliciously crafted web content may lead to arbitrary code execution. C Tenable Network Security, Inc. The descriptive text a...
CVE-2017-4641
CVE-2017-4641 is rejected/not used per the Initial Description.
CVE-2016-4641
Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion."...
CVE-2016-4641
CVE-2016-4641 affects the Login Window in Apple OS X prior to 10.11.6, enabling a crafted app leveraging a type confusion flaw to run arbitrary code in a privileged context or access sensitive user data. Apple’s security content associates this with the Login Window issue and notes remediation in...
PT-2016-5098
Name of the Vulnerable Software and Affected Versions Moxa MiiNePort E1 4641 version 1.1.10 Build 09120714 Moxa MiiNePort E1 7080 version 1.1.10 Build 09120714 Moxa MiiNePort E2 1242 version 1.1 Build 10080614 Moxa MiiNePort E2 4561 version 1.1 Build 10080614 Moxa MiiNePort E3 version 1.0 Build...
Code injection
The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...
CVE-2015-2865
CVE-2015-2865 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-4641
Affected: Samsung Galaxy S4, S4 Mini, S5, S6 with SwiftKey language-pack update. Vulnerability: Directory traversal in the SwiftKey language-pack update implementation that uses the skslm.swiftkey.net domain. Cause: crafted ZIP entry containing a .. path can be exploited to write to arbitrary fil...
CVE-2014-4641
CVE-2014-4641 entry is rejected/not used and does not represent an active vulnerability.
CVE-2010-4641
CVE-2010-4641 : The XWiki Enterprise vulnerability is an SQL injection in XWiki Enterprise before 2.5 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Multiple connected sources corroborate a similar issue affecting XWiki