74 matches found
WordPress WP Extended Search Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)
Software WP Extended Search Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4649 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 8a685d2ed687 Credits István Márton...
AlmaLinux 8 : gcc-toolset-10-binutils (ALSA-2021:4649)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4649 advisory. - An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control...
CentOS 8 : gcc-toolset-10-binutils (CESA-2021:4649)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4649 advisory. - Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 Note that Nessus has not tested for thi...
SUSE: Security Advisory (SUSE-SU-2012:1391-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 8 : evolution (CESA-2020:4649)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4649 advisory. - evolution-data-server: Response injection via STARTTLS in SMTP and POP3 CVE-2020-14928 Note that Nessus has not tested for this issue but has instead relied...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : xdg-utils regression (USN-4649-2)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4649-2 advisory. USN-4649-1 fixed vulnerabilities in xdg-utils. That update caused a regression by removing the --attach functionality in thunderbird and...
Ubuntu: Security Advisory (USN-4649-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : xdg-utils vulnerability (USN-4649-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4649-1 advisory. Jens Mueller discovered that xdg-utils incorrectly handled certain URI. An attacker could possibly use this issue to expose sensitive...
RHEL 8 : evolution (RHSA-2020:4649)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4649 advisory. Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality. The...
CVE-2020-4649
creationtimestamp| type| source ---|---|--- 2020-11-03 16:40:21+00:00| seen| https://t.me/cibsecurity/15805...
Debian DSA-4649-1 : haproxy - security update
Felix Wilhelm of Google Project Zero discovered that HAProxy, a TCP/HTTP reverse proxy, did not properly handle HTTP/2 headers. This would allow an attacker to write arbitrary bytes around a certain location on the heap, resulting in denial-of-service or potential arbitrary code execution. C...
CVE-2017-4649
...
CVE-2017-4649
CVE-2017-4649 is rejected/not used; this entry does not represent an active vulnerability.
About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
CVE-2015-4649
Aruba Networks ClearPass Policy Manager is affected by CVE-2015-4649 in versions before 6.4.7 and 6.5.x before 6.5.2. The issue allows remote authenticated administrators to gain root privileges via unspecified vectors (a different issue from CVE-2015-3654). The connected CNVD entries corroborate...
CVE-2016-4649
Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service NULL pointer dereference via unspecified vectors...
CVE-2016-4649
CVE-2016-4649 is documented in Apple’s security content for OS X El Capitan v10.11 and later, affecting the Audio component. The issue is a local denial of service caused by a NULL pointer dereference via unspecified vectors. Apple’s page groups this with other audio CVEs and notes OS X 10.11.6 s...
CVE-2016-4649
Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service NULL pointer dereference via unspecified vectors...
Oracle: Security Advisory (ELSA-2011-2015)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2011-0498)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...