53 matches found
CVE-2023-4713
creationtimestamp| type| source ---|---|--- 2023-09-03 03:35:54+00:00| seen| https://t.me/cibsecurity/69691...
CVE-2023-4713
The CVE-2023-4713 entry concerns IBOS OA 4.5.5 where the addComment function at ?r=weibo/comment/addcomment is vulnerable to SQL injection via the touid parameter. The vulnerability is described as critical, with potential high impact on confidentiality, integrity, and availability. The root caus...
Ubuntu: Security Advisory (USN-4713-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS : Linux kernel vulnerability (USN-4713-2)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4713-2 advisory. It was discovered that the LIO SCSI target implementation in the Linux kernel performed insufficient identifier checking in certain XCOPY requests. An attacker wi...
Ubuntu: Security Advisory (USN-4713-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerability (USN-4713-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4713-1 advisory. It was discovered that the LIO SCSI target implementation in the Linux kernel performed insufficient identifier checking in certain XCOPY requests. An...
CVE-2019-4713
CVE-2019-4713 affects IBM Security Guardium Data Encryption (GDE) 3.0.0.2. A remote authenticated attacker could send a specially crafted request to execute arbitrary commands on the system. Public sources confirm the flaw and its impact (high CWE/CVSS), with IBM providing a fixed version in GDE ...
Debian DSA-4713-1 : firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4713. The text...
CVE-2017-4713
CVE-2017-4713 entry is rejected and not active.
Cross site scripting
Cross-site scripting XSS vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713...
CVE-2014-3887
Cross-site scripting XSS vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713...
CVE-2016-4713
CVE-2016-4713 affects CoreDisplay in Apple OS X prior to 10.12. The vulnerability is a session-management issue where a user with screen-sharing access could view another user’s screen. The macOS Sierra 10.12 security content indicates the issue was addressed via improved session tracking, implyi...
CVE-2013-4713
CVE-2013-4713 affects I-O DATA DEVICE RockDisk, where firmware prior to 1.05e1-2.0.5 is vulnerable to Cross-site scripting (XSS) by remote authenticated users via unspecified vectors. The exact exploitation details aren’t provided in the documents, but multiple sources report an incomplete fix le...
CVE-2012-4713
The CVE-2012-4713 entry concerns Rockwell Automation FactoryTalk Services Platform (RNADiagnostics.dll) with affected CPR9 through CPR9-SR6. The root cause is an integer signedness/input validation issue that allows remote attackers to trigger a DoS by sending UDP datagrams containing a negative ...
CVE-2011-4713
Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ID parameter to 1 catalog/shoppingcart.php or 2 catalog/content.php...
CVE-2011-4713
Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ID parameter to 1 catalog/shoppingcart.php or 2 catalog/content.php...
CVE-2011-4713
CVE-2011-4713 affects osCSS2, versions up to 2.1.0 and earlier. The vulnerability is a directory traversal issue in catalog/content.php (and catalog/shopping_cart.php) where an attacker can supply a .. in the _ID parameter to read arbitrary files. This is due to insufficient input validation in t...
CVE-2011-4713
creationtimestamp| type| source ---|---|--- 2011-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18099...
CVE-2010-4713
The CVE-2010-4713 entry concerns a signed-integer/signedness error in gwia.exe of Novell GroupWise’s GroupWise Internet Agent (GWIA) prior to 8.02HP, allowing remote code execution via a crafted Content-Type header. The connected Red Hat advisory repeats the exact issue as described in NVD: an in...