121 matches found
MGASA-2024-0200 Updated openssl packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Excessive time spent checking DSA keys and parameters. CVE-2024-4603 Use After Free with SSLfreebuffers. CVE-2024-4741...
CVE-2024-4741
A use-after-free vulnerability was found in OpenSSL. Calling the OpenSSL API SSLfreebuffers function may cause memory to be accessed that was previously freed in some situations. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat...
BELL-CVE-2024-4741
Bulletin has no description...
OpenSSL UAF Vulnerability (20240528) - Windows
OpenSSL is prone to a use after free UAF vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
CVE-2024-4741
Issue summary: Calling the OpenSSL API function SSLfreebuffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code...
CVE-2018-4741
Rejected reason: This candidate is unused by its CNA...
CVE-2023-4741
The CVE-2023-4741 entry concerns IBOS OA 4.5.5, where the Delete Logs Handler component (file path related to ?r=diary/default/del) is vulnerable to SQL injection. Multiple connected sources confirm remote exploitation potential and public disclosure. The vulnerability affects unknown code in the...
CVE-2022-4741
creationtimestamp| type| source ---|---|--- 2022-12-25 22:40:14+00:00| seen| https://t.me/cibsecurity/55312...
CVE-2022-4741
Docconv (up to 1.2.0) contains a vulnerability in ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText that leads to uncontrolled memory allocation. Root cause: improper handling in memory allocation during document-to-text conversion. Impact is availability degradation; potential remote init...
CVE-2022-4741 docconv XMLToText memory allocation
A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...
Ubuntu 16.04 LTS : Jackson vulnerabilities (USN-4741-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4741-1 advisory. It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code. Tenable...
CVE-2020-4741
IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...
CVE-2020-4741
IBM InfoSphere Information Server (including InfoSphere Metadata Asset Manager) is vulnerable to a stored cross-site scripting (XSS) issue in the Web UI for versions 11.5 and 11.7. Root cause: stored XSS allowing arbitrary JavaScript in the Web UI that could lead to credentials disclosure within ...
Debian DSA-4741-1 : json-c - security update
Tobias Stoeckmann discovered an integer overflow in the json-c JSON library, which could result in denial of service or potentially the execution of arbitrary code if large malformed JSON files are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4741)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4741 advisory. kernel-uek 3.8.13-118.37.1 - Input: gtco - bounds check collection indent level Grant Hernandez Orabug: 30074414 CVE-2019-13631 Tenable has extracted the...
MOXA Device Manager Tool 2.1 - Buffer Overflow Exploit
Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MOXA Device Manager Tool 2.1 Buffer Overflow', 'Description' = %q This module exploits a...
Apple iOS < 10.0 Multiple Vulnerabilities
Binary data 9619.prm...
CVE-2016-4741
CVE-2016-4741 : In iOS up to version 9.x, the Assets component could be exploited by a network-positioned attacker to block software updates by abusing the lack of HTTPS when retrieving updates. The NVD entry describes an update-blocking MITM condition, and Appleās security content for iOS 10 con...
CVE-2015-4741
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Dialog popup...