58 matches found
CVE-2024-4679 Folder Permission Vulnerability in JP1/Extensible SNMP Agent
Incorrect Default Permissions vulnerability in Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNMP Agent on Windows, Hitachi Job Management Partner1/Extensible SNMP Agent on Windows allows File Manipulation.This issue affects JP1/Extensible SNMP Agent for Windows: from 12-0...
CVE-2024-4679 Folder Permission Vulnerability in JP1/Extensible SNMP Agent
Incorrect Default Permissions vulnerability in Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNMP Agent on Windows, Hitachi Job Management Partner1/Extensible SNMP Agent on Windows allows File Manipulation.This issue affects JP1/Extensible SNMP Agent for Windows: from 12-0...
CVE-2024-4679
CVE-2024-4679 affects Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNMP Agent on Windows, and Hitachi Job Management Partner1/Extensible SNMP Agent on Windows. The issue is described as an incorrect default permissions vulnerability that allows file manipulation. Affected...
CVE-2018-4679
Rejected reason: This candidate is unused by its CNA...
CVE-2022-4679
CVE-2022-4679 affects the Wufoo Shortcode WordPress plugin (pre-1.52). The vulnerability arises from not validating/escaping certain shortcode attributes before echoing them in pages/posts, enabling Stored Cross-Site Scripting via the shortcode when a user with Contributor+ privileges embeds it. ...
WordPress Wufoo Shortcode Plugin < 1.52 is vulnerable to Cross Site Scripting (XSS)
Software Wufoo Shortcode Type Plugin Vulnerable versions 1.52 Fixed in 1.52 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4679 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID bb3df9d73484 Credits IstvƔn MƔrton Required...
Security Bulletin: An information disclosure security vulnerability has been identified with the embedded Content Navigator component shipped with IBM Business Automation Workflow (CVE-2019-4679)
Summary Some application server information the operating system name and version, for example is included in the response when users log into IBM Content Navigator. Vulnerability Details CVEID:CVE-2019-4679 DESCRIPTION: IBM Content Navigator 3.0CD could allow an authenticated user to gain...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4679-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4679-1 advisory. It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose...
Security Bulletin: IBM Content Navigator logon response security vulnerability in FileNet Content Manager
Summary Security vulnerability in IBM Content Navigator logon response in FileNet Content Manager Vulnerability Details CVEID: CVE-2019-4679 DESCRIPTION: IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could be...
CVE-2019-4679
IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could be used in further attacks against the system. IBM X-Force ID: 171515...
CVE-2019-4679
IBM Content Navigator 3.0CD exposes hosting operating system and version information in the logon response for authenticated users, enabling information disclosure that could support targeted attacks. Mitigation is to apply the IBM Content Navigator remediation: upgrade to the 3.0 Continuous Deli...
Security Bulletin: IBM Content Navigator discloses operating system information in logon response.
Summary IBM Content Navigator includes information about the host operating system in the response after the user successfully authenticates. Vulnerability Details CVEID: CVE-2019-4679 DESCRIPTION: IBM Content Navigator could allow an authenticated user to gain information about the hosting...
CVE-2017-4679
CVE-2017-4679 is rejected/not used per initial description.
CVE-2016-4679
CVE-2016-4679 affects Apple OSes (iOS <10.1, macOS <10.12.1, tvOS <10.0.1, watchOS
Apple TV < 10.0.1 Multiple Vulnerabilities
Binary data 9757.prm...
About the security content of watchOS 3.1
About the security content of watchOS 3.1 This document describes the security content of watchOS 3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of tvOS 10.0.1
About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2015-4679
CVE-2015-4679 affects the Airties RT-210 router, where the web interface ddns.stm fails to properly filter the parameters ddns_domainame and ddns_account, enabling multiple cross-site scripting (XSS) vulnerabilities. Exploitation allows remote attackers to inject arbitrary script/HTML via the aff...
Symantec Workspace Virtualization 6.x < 6.4.1953 Local Privilege Escalation (SYM13-011)
The remote Windows host is running a version of Symantec Workspace Virtualization 6.x prior to 6.4.1953. It is, therefore, affected by a local privilege escalation vulnerability due to a failure to sanitize user-supplied input. An attacker could potentially exploit this vulnerability to run...