100 matches found
CVE-2024-4671
Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Stable Channel Update for Desktop
The Stable channel has been updated to 124.0.6367.201/.202 for Mac and Windows and 124.0.6367.201 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 124.0.6367.201 for Mac and...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 1 security fix: 339266700 High CVE-2024-4671: Use after free in Visuals. Reported by Anonymous on 2024-05-07...
CVE-2023-4671
creationtimestamp| type| source ---|---|--- 2023-12-28 11:26:37+00:00| seen| https://t.me/ctinow/159997 2024-01-20 10:11:13+00:00| seen| https://t.me/ctinow/170575...
CVE-2023-4671
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255...
CVE-2023-4671 SQLi in Talent Soft's ECOP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255...
CVE-2023-4671
Talent Software ECOP (content distribution platform) is affected by an SQL Injection in versions prior to 32255, caused by improper neutralization of special elements in SQL commands, which can lead to Command Line Execution. The CVE-2023-4671 entry lists a CRITICAL impact (CVSS 3.1 base score 9....
CVE-2022-4671
The CVE-2022-4671 entry affects the PixCodes WordPress plugin prior to version 2.3.7. The underlying issue is failure to validate and escape certain shortcode attributes before output, enabling a Stored XSS risk where a low-privilege user (contributor) could target higher-privilege users (admins)...
Mageia: Security Advisory (MGASA-2014-0291)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-4671-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4671-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker...
CVE-2020-4671
creationtimestamp| type| source ---|---|--- 2020-11-16 20:37:50+00:00| seen| https://t.me/cibsecurity/16377...
CVE-2020-4671
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284...
CVE-2020-4671
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284...
CVE-2020-4671
CVE-2020-4671 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. The issue is an information disclosure where potentially sensitive data can be read from log files by an authenticated user. IBM’s Security Bulletin details the affected versions and p...
Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4671)
Summary IBM Sterling B2B Integrator has addressed an information disclosure vulnerability. Vulnerability Details CVEID: CVE-2020-4671 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information in log files that could be read by an authenticatedl user. CVSS...
CVE-2019-4671
IBM Maximo Asset Management core product versions 7.6.0 and 7.6.1 are affected by a SQL injection vulnerability. The root cause is lack of validation of externally entered SQL statements, enabling a remote attacker to view, add, modify, or delete data in the back-end database. Exploitation is rem...
Security Bulletin: IBM Maximo Asset Management is vulnerable to SQL Injection (CVE-2019-4671)
Summary IBM Maximo Asset Management is vulnerable to SQL Injection. Vulnerability Details CVEID: CVE-2019-4671 DESCRIPTION: IBM Maximo Asset Management is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modif...
Debian DSA-4671-1 : vlc - security update
Multiple security issues were discovered in the microdns plugin of the VLC media player, which could result in denial of service or potentially the execution of arbitrary code via malicious mDNS packets. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2014-4671
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/flashrosettajsonpurldisclosure.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:29+00:00|...