78 matches found
CVE-2024-4685
creationtimestamp| type| source ---|---|--- 2025-02-19 22:21:29+00:00| seen| Telegram/eQlTGbpc-K6IjLYXZlLwoSEyC-W3D8RZOHjXmRFJE2LAQPTw...
CVE-2024-4685 Campcodes Complete Web-Based School Management System exam_timetable.php cross site scripting
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view/examtimetable.php. The manipulation of the argument exam leads to cross site scripting. The attack can be initiate...
CVE-2018-4685
Rejected reason: This candidate is unused by its CNA...
CVE-2023-4685
CVE-2023-4685 affects Delta Electronics CNCSoft-B and DOPSoft: stack-based buffer overflow in the parsing of DPA files, impacting CNCSoft-B 1.0.0.4 and DOPSoft prior to 4.0.0.82. Evidence from ZDI describes remote code execution with user interaction (via malicious page/file), while ICS-related s...
mg-start-node (>=1.0.1 <=1.0.5) potentially affected by unknown CVE via mongobd (=0.0.1-security.0)
mongobd NPM version =0.0.1-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on mongobd and may be impacted: - mg-start-node =1.0.1, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4685...
Security Bulletin: IBM Cognos Controller is vulnerable to privilege escalation (CVE-2020-4685)
Summary IBM Cognos Controller is vulnerable to privilege escalation. This has been addressed. Vulnerability Details CVEID: CVE-2020-4685 DESCRIPTION: A low level user of Cognos Controller who has Administration rights to the server where the application is installed, can escalate their privilege...
CentOS 8 : kernel (CESA-2020:4685)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4685 advisory. - kernel: net: bluetooth: heap buffer overflow when processing extended advertising report events CVE-2020-24490 - kernel: Red Hat only CVE-2020-12351...
Ubuntu 20.04 LTS : OpenJPEG vulnerabilities (USN-4685-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4685-1 advisory. It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial ...
Oracle Linux 8 : kernel (ELSA-2020-4685)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4685 advisory. - net Bluetooth: fix kernel oops in storependingadvreport Gopal Tiwari 1888454 1888455 CVE-2020-24490 - net Bluetooth: L2CAP: Fix calling skfilter on...
CVE-2020-4685
creationtimestamp| type| source ---|---|--- 2020-11-11 16:29:55+00:00| seen| https://t.me/cibsecurity/16165...
CVE-2020-4685
IBM Cognos Controller is affected by CVE-2020-4685. A low-level user with server admin rights on IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, or 10.4.2 can escalate to Super Admin and create/update/delete any user. The IBM Security Bulletin cites a base CVSS v3 score of 8.0 (HIGH) with n...
Debian: Security Advisory (DSA-4685-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-4685
CVE-2017-4685 is a rejected candidate and does not represent an active vulnerability entry.
CVE-2015-4685
Polycom RealPresence Resource Manager aka RPRM before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration...
CVE-2015-4685
CVE-2015-4685 affects Polycom RealPresence Resource Manager (RPRM) before 8.4. The issue is a sudo misconfiguration that lets the plcm user execute root commands via scripts in /var/polycom/cma/upgrade/scripts, enabling privilege escalation. Impact is described as full root access for an attacker...
skynewsarabia.com XSS vulnerability
Vulnerable URL: http://www.skynewsarabia.com/web/search?q=%27%20onpageshow=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4685 VIP website status:| Yes Check skynewsarabia.com SSL...
CVE-2016-4685
CVE-2016-4685 affects iOS versions before 10.1, in the iTunes Backup component where a weak password hashing method was used for encrypted backups, enabling easier recovery of the backup password and thus decryption of files. Appleās security content for iOS 10.1 states the weak hash was removed,...
Polycom RealPresence Resource Manager 8.4 - Multiple Vulnerabilities
Polycom RealPresence Resource Manager 8.4 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Critical vulnerabilities allow surveillance on...
Polycom RealPresence Resource Manager (RPRM) Disclosure / Traversal
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Critical vulnerabilities allow surveillance on conferences product: Polycom RealPresence Resource Manager RPRM vulnerable...
CVE-2014-4685
CVE-2014-4685 affects Siemens SIMATIC WinCC prior to 7.3 (used in PCS7). Root cause: weak system-object access control enabling local privilege escalation for local users. Siemens released fixes in WinCC 7.3 (and PCS7 8.1); upgrading is advised. Other sources note mitigation steps and a broader s...