CVE-2019-4738

CVE-2019-4738 affects IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–5.2.6.5 and 6.0.0.0–6.0.3.1). The vulnerability is an information disclosure in the Dashboard UI that leaks sensitive information to authenticated users, enabling potential follow-on attacks. The public documents...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator Dashboard UI (CVE-2019-4738)

Summary IBM Sterling B2B Integrator has addressed the information disclosre security vulnerability in Dashboard UI Vulnerability Details CVEID: CVE-2019-4738 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition discloses sensitive information to an authenticated user from the dashboard UI...

Fedora 30 : mingw-libxslt (2019-320d5295fc)

Update to 1.1.33 Fix CVE-2016-1841, CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, CVE-2016-4609, CVE-2019-11068, CVE-2016-1684, CVE-2016-1683, CVE-2016-4738. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

CVE-2017-4738

...

CVE-2017-10943

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-10943

CVE-2017-10943 affects Foxit Reader 8.3.0.14878 and earlier. The issue arises from PDF parsing and improper validation, causing an out-of-bounds read (read past the end of an allocated object) that can disclose sensitive information. Exploitation described in sources involves a user-assisted vect...

CVE-2017-10943

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

SUSE SLED12 / SLES12 Security Update : libxslt (SUSE-SU-2017:1313-1)

This update for libxslt fixes the following issues : - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page bsc1035905. -...

Nokogiri gem contains two upstream vulnerabilities in libxslt 1.1.29

nokogiri version 1.7.2 has been released. This is a security update based on 1.7.1, addressing two upstream libxslt 1.1.29 vulnerabilities classified as "Medium" by Canonical and given a CVSS3 score of "6.5 Medium" and "8.8 High" by RedHat. These patches only apply when using Nokogiri's vendored...

Updated libxslt packages fix security vulnerability

A heap overread bug was found in libxslt, which can cause arbitrary code execution or denial of service CVE-2016-4738...

[SECURITY] [DSA 3709-1] libxslt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3709-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 700-1] libxslt security update

Package : libxslt Version : 1.1.26-14.1+deb7u2 CVE ID : CVE-2016-4738 Debian Bug : 842570 A heap overread bug was found in libxslt, which can cause arbitrary code execution or denial of service. For Debian 7 "Wheezy", these problems have been fixed in version 1.1.26-14.1+deb7u2. We recommend that...

CVE-2016-4738

libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4738

libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4738

libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4738

CVE-2016-4738 is a memory corruption vulnerability in libxslt. The issue occurs in the XSLT processing runtime library (libxslt) and could allow a remote attacker to execute arbitrary code or cause a denial of service when a crafted web page is processed. Debian’s security advisory DSA-3709-1 con...

CVE-2013-4738

Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges via 1 a crafted VIDIOCMSMVPEDEQUEUESTREAMBUFFINFO ioctl call, related to...

CVE-2015-4738

Technical details about CVE-2015-4738 are not publicly provided in the supplied documents. Monitor for updates from NVD/Oracle and related advisories.

CVE-2014-4738

Fortinet FortiWeb 5.x prior to 5.2.1 is affected by CVE-2014-4738 (XSS) in the web management interface URLs /user/ldap_user/check_dlg and /user/radius_user/check_dlg due to insufficient input validation. This allows remote attackers to inject arbitrary JavaScript in an administrative browser ses...