70 matches found
CVE-2022-4683
CVE-2022-4683 affects usememos/memos prior to 0.9.0. The vulnerability is a missing Secure attribute on cookies in HTTPS sessions, enabling potential cookie exposure and session hijacking. Exploitation details are not provided in the supplied documents. remediation: upgrade to version 0.9.0 or la...
Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerability (USN-4683-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4683-1 advisory. Minh Yuan discovered that the framebuffer console driver in the Linux kernel did not properly handle fonts in some conditions. A local attacker could use this to...
Debian DSA-4683-1 : thunderbird - security update
Multiple security issues have been found in Thunderbird which could result in spoofing the displayed sender email address, denial of service or potentially the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Debian: Security Advisory (DSA-4683-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-4683
CVE-2017-4683 is rejected/not used per the Initial Description.
CVE-2015-4683
Polycom RealPresence Resource Manager aka RPRM before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests...
CVE-2015-4683
Polycom RealPresence Resource Manager (RPRM) before version 8.4 is affected by CVE-2015-4683, where session IDs are transmitted as HTTP GET parameters. This can lead to sensitive data exposure and, in certain actions (e.g., file/download and log access), enable privilege escalation by an attacker...
CVE-2016-4683
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted SGI file...
CVE-2016-4683
CVE-2016-4683 affects macOS prior to 10.12.1 and targets the ImageIO SGI image parsing code. A crafted SGI file could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service via out-of-bounds memory access, potentially crashing the application. Public refe...
Polycom RealPresence Resource Manager 8.4 - Multiple Vulnerabilities
Polycom RealPresence Resource Manager 8.4 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Critical vulnerabilities allow surveillance on...
Polycom RealPresence Resource Manager (RPRM) Disclosure / Traversal
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Critical vulnerabilities allow surveillance on conferences product: Polycom RealPresence Resource Manager RPRM vulnerable...
CVE-2014-4683
The CVE-2014-4683 issue affects Siemens SIMATIC WinCC WebNavigator: remote authenticated users can escalate privileges via HTTP/HTTPS requests to the WebNavigator server (ports 80/443). Sources describe Prague: Privilege gain through WebNavigator’s access control, with explicit remediation in upd...
KLA10393 LPE & OSI vulnerabilities in Siemens Simatic WinCC
Multiple serious vulnerabilities have been found in Siemens Simatic WinCC. Malicious users can exploit these vulnerabilities to gain privileges or obtain sensitive information. Below is a complete list of vulnerabilities 1. An unsafe encryption key can be exploited remotely via key extraction; 2...
openSUSE Security Update : opera (openSUSE-SU-2011:1314-1)
opera was updated to version 11.60 to fix several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5529. The text description of this plugin is C SUSE LLC...
openSUSE Security Update : opera (openSUSE-2011-76)
Opera version update to 11.60 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-76. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...
openSUSE Security Update : opera (openSUSE-SU-2011:1314-1)
opera was updated to version 11.60 to fix several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5529. The text description of this plugin is C SUSE LLC...
Siemens SIMATIC WinCC Vulnerabilities (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-14-205-02 Siemens SIMATIC WinCC Vulnerabilities that was published July 24, 2014, on the NCCIC/ICS-CERT web site. Researchers Sergey Gordeychik, Alexander Tlyapov, Dmitry Nagibin, and Gleb Gritsai of Positive...
CVE-2013-4683
CVE-2013-4683 affects the TYPO3 meta_feedit extension (versions ≤0.1.10). The issue is an SQL injection in the extension that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. According to NVD, the base score is 7.5 (HIGH) with network attack vector and low comple...