GitLab 15.2 < 16.1.5 / 16.2 < 16.2.5 / 16.3 < 16.3.1 (CVE-2023-4647)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which th...

CVE-2022-4647 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-4647 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-4647

CVE-2022-4647 affects microweber/microweber up to version 1.3.2, with a stored XSS vulnerability caused by insufficient input filtering/escaping of user data. Several connected sources confirm the flaw and its impact on Microweber prior to 1.3.2. Exploitation information in the connected data ind...

CVE-2022-4647 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.2...

Security Bulletin: Multiple security vulnerabilities in IBM Sales Center for WebSphere Commerce (CVE-2008-7271, CVE-2010-4647, CVE-2012-0186, CVE-2012-0191, CVE-2012-2159, CVE-2012-2161)

Abstract Multiple security vulnerabilities have been identified in IBM Sales Center for WebSphere Commerce V6.0 and V7.0 Content VULNERABILITY DETAILS – Directory Traversal CVE ID: CVE-2012-0186 DESCRIPTION: Specially crafted URLs can be sent to the Eclipse Help component of IBM Sales Center for...

AlmaLinux 8 : freerdp and vinagre (ALSA-2020:4647)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4647 advisory. - In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound read...

Oracle Linux 8 : kernel (ELSA-2021-4647)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4647 advisory. - tipc: fix size validations for the MSGCRYPTO type Bruno Meneguele 2020506 2020507 CVE-2021-43267 - lib/timerqueue: Rely on rbtree semantics for next...

RHEL 8 : kernel (RHSA-2021:4647)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4647 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Insufficient validation of...

CentOS 8 : freerdp and vinagre (CESA-2020:4647)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4647 advisory. - freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 - freerdp: Out of bound read in updaterecv could result in a crash...

Ubuntu 20.10 : Thunderbird vulnerabilities (USN-4647-1)

The remote Ubuntu 20.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4647-1 advisory. Several security issues were fixed in Thunderbird. Tenable has extracted the preceding description block directly from the Ubuntu security advisory. Note tha...

CVE-2020-4647

creationtimestamp| type| source ---|---|--- 2020-11-16 20:37:49+00:00| seen| https://t.me/cibsecurity/16376...

CVE-2020-4647

CVE-2020-4647 affects IBM Sterling File Gateway versions 2.2.0.0–2.2.6.5 and 6.0.0.0–6.0.3.2, which are vulnerable to SQL injection due to unsafe handling of SQL statements in the back-end database. A remote attacker could issue crafted SQL to view, add, modify, or delete data. IBM’s bulletin lis...

Security Bulletin: SQL Injection Vulnerability Affects IBM Sterling File Gateway (CVE-2020-4647)

Summary IBM Sterling File Gateway has addressed a SQL injection vulnerability. Vulnerability Details CVEID: CVE-2020-4647 DESCRIPTION: IBM Sterling File Gateway is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view,...

Oracle Linux 8 : freerdp / and / vinagre (ELSA-2020-4647)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4647 advisory. freerdp 2:2.1.1-1 - Update to 2.1.1 rhbz1834287. 2:2.0.0-47.rc4 - Fix SCARDINSUFFICIENTBUFFER error rhbz1803054 - Do not advertise /usb in help output...

Debian DSA-4647-1 : bluez - security update

It was reported that the BlueZ's HID and HOGP profile implementations don't specifically require bonding between the device and the host. Malicious devices can take advantage of this flaw to connect to a target host and impersonate an existing HID device without security or to cause an SDP or GAT...

CVE-2017-4647

CVE-2017-4647 entry is rejected/not used; this candidate was not assigned to issues.

About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2016-4647

CVE-2016-4647 affects Apple OS X, where audio handling before 10.11.6 is vulnerable to crafted audio files that trigger memory corruption, allowing a local user to gain privileges or cause a denial of service. The Apple advisory packages this under OS X El Capitan v10.11.6 and Security Update 201...

Panasonic Security API SDK Iprosapi ActiveX Control Buffer Overflow (CVE-2015-4647)

A buffer overflow vulnerability exists in the Ipropsapi ActiveX Control component of the Panasonic Security API SDK. The vulnerability is due to an error when processing the FilePassword property. A remote attacker can exploit this vulnerability by enticing the victim to visit a specially crafted...