150 matches found
USN-6410-1: GRUB2 vulnerabilities
It was discovered that a specially crafted file system image could cause a heap-based out-of-bounds write. A local attacker could potentially use this to perform arbitrary code execution bypass and bypass secure boot protections. CVE-2023-4692 It was discovered that a specially crafted file syste...
SUSE CVE-2016-4692
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...
CVE-2022-4692 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4692 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4692 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4692
CVE-2022-4692 affects usememos/memos prior to 0.9.0, with a stored XSS flaw in the application’s handling of user input (notably via its Resource component and SVG uploads). The vulnerability is documented across multiple sources (NVD/Red Hat OSV, GHSA, CNNVD, CVE lists) as a Cross-site Scripting...
RHEL 7 : kernel (RHSA-2021:4692)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4692 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in...
SUSE: Security Advisory (SUSE-SU-2015:1324-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4692-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : tar vulnerabilities (USN-4692-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4692-1 advisory. Chris Siebenmann discovered that tar incorrectly handled extracting files resized during extraction when invoked with the --spars...
CVE-2020-4692
creationtimestamp| type| source ---|---|--- 2020-11-16 20:38:05+00:00| seen| https://t.me/cibsecurity/16388...
CVE-2020-4692
CVE-2020-4692 affects IBM Sterling B2B Integrator Standard Edition: 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. It is a path traversal vulnerability that could allow an authenticated user to obtain sensitive information from the Dashboard UI. Remediation: upgrade to 5.2.6.5_3, 6.0.3.3, or 6.1.0.0 (per I...
Security Bulletin: Path Traversal Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4692)
Summary IBM Sterling B2B Integrator has addressed a path traversal vulnerability. Vulnerability Details CVEID: CVE-2020-4692 DESCRIPTION: IBM Sterling B2B Integrator could allow an authenticated user to obtain sensitive information from the Dashboard UI. CVSS Base score: 4.3 CVSS Temporal Score:...
CVE-2019-4692
creationtimestamp| type| source ---|---|--- 2020-08-26 22:55:20+00:00| seen| https://t.me/cibsecurity/14326...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1535)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-4692
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS...
CVE-2013-4692
CVE-2013-4692 corresponds to a cross-site scripting vulnerability in the Xorbin Analog Flash Clock extension for Joomla and related WordPress/XORBin clocks. The root cause is unsanitized input in the widgetUrl/urlWindow parameters from external input, enabling user-controllable script execution i...