OESA-2023-1040 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.CVE-2022-4662...

OESA-2023-1041 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.CVE-2022-4662...

UBUNTU-CVE-2022-4662

A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system...

CVE-2022-4662

An incorrect access control flaw was found in the Linux kernel USB core subsystem. When attaching a malicious usb device, the recursive locking violation in usb-storage can cause the kernel to deadlock. This issue could allow a local user to crash the system...

CVE-2022-4662

CVE-2022-4662 is a Linux kernel USB core subsystem vulnerability describing improper access control when a user attaches a USB device. A local attacker could trigger a crash by exploiting the flawed USB device handling. The connected IBM bulletin for Spectrum Protect Plus notes a remediation: fix...

CVE-2022-4662

A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system...

Security Bulletin: A vulnerability exists in the Event Streams 10.0.0 schema registry that allows unauthorised access to create, edit and delete schemas (CVE-2020-4662)

Summary A vulnerability exists in the Event Streams 10.0.0 schema registry that allows unauthorised access to create, edit and delete schemas Vulnerability Details CVEID: CVE-2020-4662 DESCRIPTION: IBM Event Streams could allow an authenticated user to perform tasks to a schema due to improper...

CVE-2020-4662

Summary : IBM Event Streams 10.0.0 schema registry contains a vulnerability due to improper authentication validation that could allow an authenticated user to perform tasks on a schema (create, edit, delete) without proper authorization. Impact : unauthorized schema operations; CVSSv3 base 8.8 (...

Debian DSA-4662-1 : openjdk-11 - security update

Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, insecure TLS handshakes, bypass of sandbox restrictions or HTTP response splitting attacks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2010-4662

creationtimestamp| type| source ---|---|--- 2020-02-05 22:35:09+00:00| seen| https://t.me/cibsecurity/9637...

CVE-2010-4662

CVE-2010-4662 concerns PmWiki with a stored/reflected Cross-Site Scripting (XSS) vulnerability in versions before 2.2.21. The available connected documents consistently identify the affected software as PmWiki and the issue as XSS, but do not provide concrete technical details about vulnerable co...

CVE-2017-4662

CVE-2017-4662 entry is rejected and not used.

CVE-2016-4662

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleGraphicsControl" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4662

CVE-2016-4662 affects macOS prior to 10.12.1 via the AppleGraphicsControl component. A memory corruption vulnerability can allow a crafted app to run arbitrary code with kernel privileges or cause a denial of service. The issue is addressed in macOS 10.12.1 and corresponding security updates (Sec...

CVE-2013-4662

The CVE-2013-4662 entry describes a SQL injection vulnerability in CiviCRM’s Quick Search API (contact.getquick) affecting CiviCRM versions 4.2.0–4.2.9 and 4.3.0–4.3.3. The issue allows remote authenticated users to bypass the validation layer and perform SQL injection via a direct request to the...

CVE-2013-4662

The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to contact.getquick...

CVE-2012-4662

The CVE-2012-4662 issue affects Cisco ASA 5500 series (and ASA ASASM on Catalyst 6500) and FWSM 4.1 on 6500/7600 platforms. The root cause is a flaw in the DCERPC inspection engine that allows remote, unauthenticated adversaries to trigger a denial of service resulting in a device reload via a cr...

SuSE 11.1 Security Update : OpenSSL (SAT Patch Number 4662)

This update of openssl fixes a timing attack. This attack can be used to obtain the private key of a TLS server whenever ECDSA signatures are used. CVE-2011-1945: CVSS v2 Base Score: 4.3 important AV:N/AC:M/Au:N/C:P/I:N/A:N: Cryptographic Issues. CWE-310 %NASLMINLEVEL 70300 C Tenable Network...

CVE-2009-4662

Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter...

CVE-2009-4662

CVE-2009-4662 affects Novell GroupWise WebAccess (7.0 up to 7.03 HP4; 8.0 up to 8.0 SP1). It is a cross-site scripting vulnerability in the WebAccess component allowing remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter. The provided connected documents con...