57 matches found
CVE-2022-4723
rdiffweb (ikus060/rdiffweb) prior to version 2.5.5 is affected by an absence of rate limiting on the resend email feature when enabling or disabling 2FA via the /prefs/mfa endpoint. This can allow resource allocation without limits, as described across multiple sources. Affected component is the ...
CVE-2022-4723 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5...
CVE-2019-4723
CVE-2019-4723 affects IBM Cognos Analytics 11.0 and 11.1, where a remote attacker could obtain credentials from a user's browser due to incorrect autocomplete settings in the New Data Server Connection page. Root cause/impact are described in IBM/IBM X-Force references; cloud versions are address...
Ubuntu: Security Advisory (USN-4723-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : PEAR vulnerability (USN-4723-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4723-1 advisory. It was discovered that PEAR incorrectly handled symbolic links in archives. A remote attacker could possibly use this issue to execute...
CVE-2020-4723
IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force I...
CVE-2020-4723
IBM i2 Analyst’s Notebook versions 9.2.0 and 9.2.1 are affected by CVE-2020-4723 due to memory corruption. The vulnerability enables a local attacker to execute arbitrary code by convincing a victim to open a specially crafted file. Underlying issue is memory corruption within the affected applic...
Debian DSA-4723-1 : xen - security update
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, guest-to-host privilege escalation or information leaks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Adviso...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10948
CVE-2017-10948 affects Foxit Reader (v8.2.1.6871) and is caused by a failure to validate an object before operations in app.execMenuItem, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a crafted file). Multiple connected sources (OpenV...
CVE-2012-4723
CVE-2012-4723 entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-4723
Intel Graphics Driver in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-4723
CVE-2016-4723 affects Intel Graphics Driver on macOS OS X versions prior to 10.12. The entry notes a memory management flaw described as a use-after-free issue, allowing either arbitrary code execution in kernel context or a denial of service when a crafted app triggers the vulnerability. The con...
CVE-2014-4723
CVE-2014-4723 describes an XSS vulnerability in the WordPress Easy Banners plugin version 1.4. The issue allows remote attackers to inject arbitrary script or HTML via the name parameter to wp-admin/options-general.php. Impact is consistent with XSS (remote execution of script in the context of t...
CVE-2011-4723
CVE-2011-4723 affects the D-Link DIR-300 router. The vulnerability is information disclosure due to cleartext password storage in the device, enabling context-dependent attackers to obtain sensitive credentials. Root cause is lack of password hashing/storage of passwords in plaintext. Public sour...
CVE-2010-4723
Smarty before 3.0.0, when security is enabled, does not prevent access to the 1 dynamic and 2 private object members of an assigned object, which has unspecified impact and remote attack vectors...
DEBIAN-CVE-2010-4723
Smarty before 3.0.0, when security is enabled, does not prevent access to the 1 dynamic and 2 private object members of an assigned object, which has unspecified impact and remote attack vectors...
CVE-2010-4723
Smarty before 3.0.0, when security is enabled, does not prevent access to the 1 dynamic and 2 private object members of an assigned object, which has unspecified impact and remote attack vectors...