SUSE CVE-2007-4661

The chunksplit function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is...

CVE-2019-4661

IBM FileNet Content Manager and Case Foundation are affected by CVE-2019-4661, where Content could allow an attacker to obtain sensitive information through content sniffing. Affected versions: FileNet Content Manager and Case Foundation 5.5.2 and 5.5.3. Mitigation: install one of the patches lis...

RHEL 8 : pcs (RHSA-2022:4661)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4661 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: sinatra: path traversal possib...

Ubuntu 16.04 LTS / 18.04 LTS : Snapcraft vulnerability (USN-4661-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4661-1 advisory. It was discovered that Snapcraft includes the current directory when configuring LDLIBRARYPATH for application commands. If a user were tricked into...

Ubuntu: Security Advisory (USN-4661-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4661

IBM Security Access Manager (ISAM) 9.0.7 and IBM Security Verify Access (ISVA) 10.0.0 are affected by CVE-2020-4661, a timing side-channel information disclosure vulnerability. The issue stems from a vulnerability in how ISAM/ISVA handled certain operations, potentially allowing an attacker to ob...

Security Bulletin: Security vulnerabilities have been fixed in IBM Security Access Manager and IBM Security Verify Access (CVE-2020-4661, CVE-2020-4699, CVE-2020-4660)

Summary Several security vulneraabilties have been fixed in both IBM Security Access Manager and IBM Security Verify Access products. Vulnerability Details CVEID: CVE-2020-4661 DESCRIPTION: IBM Security Access Manager Appliance could allow an attacker to obtain sensitive using timing side channel...

Debian: Security Advisory (DSA-4661-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4661

creationtimestamp| type| source ---|---|--- 2020-02-12 20:37:23+00:00| seen| https://t.me/cibsecurity/9795...

CVE-2010-4661

CVE-2010-4661 affects udisks prior to 1.0.3, where a local user can load arbitrary Linux kernel modules. The vulnerability is triggered by the udisks component handling module loading, enabling local privilege impact (I) with partial confidentiality, integrity, and availability implications. Mult...

CVE-2017-4661

CVE-2017-4661 is rejected/not used; this candidate does not represent an active vulnerability entry.

CVE-2017-4661

...

CVE-2015-4661

CVE-2015-4661 affects Symphony CMS 2.6.2. A cross-site scripting (XSS) vulnerability exists in the sort parameter used by the authors search in system/authors, caused by insufficient input filtering. This can allow remote attackers to inject arbitrary web script or HTML. Based on the cited source...

[security bulletin] HPSBGN03108 rev.1 - HP Records Manager, Remote Cross-Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04441391 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04441391 Version: 1 SUPPORT...

CVE-2014-4661

Cross-site scripting XSS vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4661

CVE-2014-4661: HP Records Manager is affected by a remote XSS in HP Records Manager 7.3.5 and 8.x up to 8.1 Patch 3. HP notes that HP Records Manager v8.1 Patch 3 and v7.3.5 (and earlier) are impacted; the vulnerability allows remote injection of script/HTML via unspecified vectors. Remediation p...

openSUSE Security Update : udisks (openSUSE-SU-2011:0414-1)

This update of udisks improves input validation. Before it was possible to load arbitrary LKMs. CVE-2010-4661: CVSS v2 Base Score: 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P: unknown unknown %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : udisks (openSUSE-SU-2011:0414-1)

This update of udisks improves input validation. Before it was possible to load arbitrary LKMs. CVE-2010-4661: CVSS v2 Base Score: 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P: unknown unknown %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2013-4661

CiviCRM versions 2.0.0–4.2.9 and 4.3.0–4.3.3 do not properly enforce RBAC for default custom searches, allowing remote authenticated users with the access CiviCRM permission to bypass restrictions and view custom contribution data without the access CiviContribute permission. Root cause: RBAC mis...

CVE-2012-4661

CVE-2012-4661 : A stack-based buffer overflow in Cisco’s DCERPC inspection engine affects ASA 5500 series (and ASASM in Catalyst 6500) and FWSM, allowing an unauthenticated remote attacker to execute arbitrary code via a crafted DCERPC packet. Affected versions include ASA 8.3 before 8.3(2.34), 8...