85 matches found
CVE-2020-4668
IBM Sterling B2B Integrator is vulnerable to cross-site request forgery (CSRF). Affected: Standard Edition versions 6.0.0.0–6.0.3.5, 6.1.0.0–6.1.0.3, and 6.1.1.0. Root cause: lack of CSRF token authentication in the EBICS client allows attacker to perform actions on behalf of a trusted user. Impa...
Mageia: Security Advisory (MGASA-2015-0181)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2013-0232)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : python-apt regression (USN-4668-3)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4668-3 advisory. USN-4668-1 fixed vulnerabilities in python-apt. The update caused a regression when using certain APIs with a file handle. This update fix...
Ubuntu: Security Advisory (USN-4668-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4668-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.10 : python-apt regression (USN-4668-2)
The remote Ubuntu 20.10 host has packages installed that are affected by a vulnerability as referenced in the USN-4668-2 advisory. USN-4668-1 introduced a regression in python-apt. Tenable has extracted the preceding description block directly from the Ubuntu security advisory. Note that Nessus h...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : python-apt vulnerability (USN-4668-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4668-1 advisory. Kevin Backhouse discovered that python-apt incorrectly handled resources. A local attacker could possibly use this issue to cause python-a...
Debian DSA-4668-1 : openjdk-8 - security update
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, insecure TLS handshakes, bypass of sandbox restrictions or HTTP response splitting attacks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Roundcube Webmail < 0.8.1 XSS Vulnerability
Roundcube Webmail is prone to a cross-site scripting XSS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
CVE-2017-4668
CVE-2017-4668 entry is rejected/not used and does not represent an active vulnerability.
AVG AntiVirus for MacOS Information Disclosure Vulnerability
AVG AntiVirus for MacOS is an antivirus and anti-backdoor antivirus program for MacOS. scan engine is one of the antivirus scanning engines. A security vulnerability exists in versions of AVG AntiVirus for MacOS prior to scan engine 4668. A remote attacker could exploit the vulnerability to bypas...
CVE-2016-4668
CVE-2016-4668 is rejected/not used per the initial description; does not represent an active vulnerability entry.
Mandriva Linux Security Advisory : cherokee (MDVSA-2015:225)
Updated cherokee packages fix security vulnerability : The cherokeevalidatorldapcheck function in validatorldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to bypass authentication via an empty...
MGASA-2015-0181 Updated cherokee packages fix CVE-2014-4668
Updated cherokee packages fix security vulnerability: The cherokeevalidatorldapcheck function in validatorldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to bypass authentication via an empty...
Fedora 20 : cherokee-1.2.103-6.fc20 (2015-6279)
Resolves bz 1114461 - CVE-2014-4668 cherokee: authentication bypass when LDAP server allows unauthenticated binds Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...
Fedora 21 : cherokee-1.2.103-6.fc21 (2015-6392)
Resolves bz 1114461 - CVE-2014-4668 cherokee: authentication bypass when LDAP server allows unauthenticated binds Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...
Fedora 22 : cherokee-1.2.103-6.fc22 (2015-6194)
Resolves bz 1114461 - CVE-2014-4668 cherokee: authentication bypass when LDAP server allows unauthenticated binds Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...