45 matches found
Ubuntu: Security Advisory (USN-4666-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4666-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4666-1 lxml vulnerability
It was discovered that lxml incorrectly handled certain HTML. An attacker could possibly use this issue to cross-site scripting XSS attacks...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : lxml vulnerability (USN-4666-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4666-1 advisory. It was discovered that lxml incorrectly handled certain HTML. An attacker could possibly use this issue to cross-site scripting XSS attack...
Security Bulletin: CVE-2019-4666 IBM UrbanCode Deploy (UCD) could allow a local user to obtain sensitive information by unmasking certain secure values in documents.
Summary IBM UrbanCode Deploy UCD could allow a local user to obtain sensitive information by unmasking certain secure values in documents. Vulnerability Details CVEID: CVE-2019-4666 DESCRIPTION: IBM UrbanCode Deploy UCD could allow a local user to obtain sensitive information by unmasking certain...
Debian DSA-4666-1 : openldap - security update
A vulnerability was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. LDAP search filters with nested boolean expressions can result in denial of service slapd daemon crash. C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2019-4666
CVE-2019-4666 affects IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build (UCB) 6.1.5, where a local user could unmask certain secure values in documents to obtain sensitive information. The IBM bulletin notes a low-severity, local-access issue with CVSS v3.0 base score 2.3 (vector: AV:L/AC:...
CVE-2016-4666
CVE-2016-4666 affects Apple WebKit components (iOS prior to 10.1, Safari prior to 10.0.1, tvOS prior to 10.0.1) and can lead to remote code execution or memory corruption via malicious web content. Public advisories and OpenVAS/Nessus listings corroborate the WebKit-based issue and reference Appl...
About the security content of Safari 10.0.1 - Apple Support
For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, see the Apple Product Security...
macOS : Apple Safari < 10.0.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X or macOS host is prior to 10.0.1. It is, therefore, affected by multiple vulnerabilities in WebKit : - An unspecified flaw exists in state management due to improper validation of user-supplied input. An unauthenticated, remote attacker...
Apple TV < 10.0.1 Multiple Vulnerabilities
Binary data 9757.prm...
About the security content of Safari 10.0.1
About the security content of Safari 10.0.1 This document describes the security content of Safari 10.0.1. For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are list...
CVE-2015-4666
CVE-2015-4666 affects Xceedium Xsuite 2.4.4.5 and earlier, exposing a directory-traversal flaw in the opm/read_sessionlog.php script. The vulnerability allows unauthenticated users to read arbitrary files via the logFile parameter using a quadruple dot and slash pattern (....//), potentially expo...
RedHat Update for libarchive RHSA-2011:1507-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-4666
CVE-2010-4666 : A buffer overflow in the libarchive library (3.0 pre-release) allows remote attackers to crash the application or cause other impact via a crafted CAB file, due to improper handling of Huffman code data in LZX data. Documented across multiple sources: Red Hat RHSA-2011:1507-01 and...
SuSE 11.1 Security Update : flash-player (SAT Patch Number 4666)
This update of flash player fixes a cross-site scripting vulnerability CVE-2011-2107. For further details please refer to http://www.adobe.com/support/security/bulletins/apsb11-13.html . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...
CVE-2009-4666
Webradev Download Protect 1.0 contains multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL via the GLOBALS[RootPath] parameter targeting files in includes/DProtect/, specifically Framework/EmailTemplates....
CVE-2008-4666
CVE-2008-4666: A SQL injection vulnerability exists in Ultimate Webboard 3.00 (webboard.php) allowing remote attackers to execute arbitrary SQL via the Category parameter. This is documented in multiple sources (NVD entry with CVSS v2 base score 6.8, Attack Vector: Network, Privileges Required: N...