Debian: Security Advisory (DSA-4743-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4743-1 : ruby-kramdown - security update

A flaw was discovered in ruby-kramdown, a fast, pure ruby, Markdown parser and converter, which could result in unintended read access to files or unintended embedded Ruby code execution when the ::options / extension is used together with the 'template' option. The update introduces a new option...

CVE-2013-4743

creationtimestamp| type| source ---|---|--- 2019-12-27 20:40:36+00:00| seen| https://t.me/cibsecurity/8900 2024-03-17 15:51:40+00:00| seen| https://t.me/ctinow/209976...

CVE-2013-4743

Static HTTP Server 1.0 has a Local Overflow...

CVE-2013-4743

Static HTTP Server 1.0 has a documented Local/Buffer Overflow vulnerability. The issue stems from memory operations performed without proper data boundary validation, leading to potential reads/writes beyond allocated memory (buffer/heap overflow). Impacts cited include memory corruption and cras...

CVE-2013-4743

Static HTTP Server 1.0 has a Local Overflow...

CVE-2019-4743

IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link...

CVE-2019-4743

IBM Financial Transaction Manager for SWIFT Services 3.0 is affected by CVE-2019-4743: authorization tokens and session cookies do not have the Secure attribute set, allowing cookie exposure over insecure links (http). This is documented in IBM Security Bulletin (CVE-2019-4743) with a remediation...

CVE-2017-4743

...

CVE-2016-4743

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process...

CVE-2016-4743

CVE-2016-4743 is a WebKit/WebKitGTK+ memory-disclosure and memory-corruption vulnerability affecting Apple platforms (iOS <10.2, Safari <10.0.2, iCloud <6.1, iTunes

About the security content of Safari 10.0.2

About the security content of Safari 10.0.2 This document describes the security content of Safari 10.0.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2015-4743

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities...

CVE-2015-4743

CVE-2015-4743 affects Oracle E-Business Suite 12.2.3, specifically the Oracle Applications DBA component. The vulnerability allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities. The connected sources corroborate a disclosed vulnerability in this ...

CVE-2014-4743

Kajona CMS is prone to multiple XSS in the Search module (template files search_ajax.tpl and search_ajax_small.tpl). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter. Affected product: Kajona before 4.5 (in the Search module). Root cause: i...

Oracle Linux 5 : Important: / krb5 (ELSA-2007-0892)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0892 advisory. 1.5-29 - update to revised patch for CVE-2007-3999 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

CVE-2012-4743

The CVE-2012-4743 entry describes multiple SQL injection vulnerabilities in the Siche search module (Siche search module 0.5) for Zeroboard, exploitable via the parameters (ss, sm, align, category) in ssearch.php. The underlying issue is insecure handling of input in ssearch.php that allows remot...

Gentoo Security Advisory GLSA 201111-12 (abcm2ps)

The remote host is missing updates announced in advisory GLSA 201111-12. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201111-12 (abcm2ps)

The remote host is missing updates announced in advisory GLSA 201111-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2011-4743

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/user/create and certain other files...