52 matches found
CVE-2022-4778 path traversal in elvexys StreamX using StreamView HTML component with public web server feature
StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authenticated users to get unauthorized access to files on the server's filesystem. StreamX applications using StreamView HTML component with the public web server feature activated ar...
Security Bulletin: IBM License Metric Tool v9 and IBM Endpoint Manager for Software Use Analysis v9 vulnerable to CSRF attacks - CVE-2014-4774, CVE-2014-4778
Summary IBM License Metric Tool v9 and IBM Endpoint Manager for Software Use Analysis v9 are vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed...
Debian DSA-4778-1 : firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4778. The text...
CVE-2020-4778
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156...
CVE-2020-4778
CVE-2020-4778 affects IBM Cúram Social Program Management, with vulnerable tokens hashed using MD5 in 7.0.9 and 7.0.10. Root cause: MD5 hashing of a token in a single instance, weaker than SHA-256 currently used in the app. Impact described by IBM: CVSS base score 5.9; confidentiality impact high...
CVE-2020-4778
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156...
CVE-2019-4778
CVE-2019-4778 is rejected and does not represent an active vulnerability entry.
CVE-2017-4778
This CVE entry is rejected/not used and does not represent an active vulnerability.
kz.all.biz XSS vulnerability
Vulnerable URL: https://kz.all.biz/search/enterprises/1/?q=457%22onfocus=prompt%27XSSposed%27%20autofocus=%22=2134169=456 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4778 VIP website status:| Yes Coordinated...
CVE-2012-4778
CVE-2012-4778 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2016-4778
CVE-2016-4778 affects the Kernel on Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). It enables arbitrary code execution in a privileged context or memory corruption via a crafted app. Apple’s security content pages indicate fixes in iOS 10, macOS Sierra 10.1...
Design/Logic Flaw
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...
CVE-2015-4778
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...
CVE-2015-4778
Technical details about CVE-2015-4778 are not provided in the connected documents; no specifics on affected product versions, root cause, or remediation are available here. Monitor for updates.
CVE-2014-4778
CVE-2014-4778 concerns IBM License Metric Tool (LM Tool) v9 and IBM Endpoint Manager for Software Use Analysis v9. The issue: the login page response lacks the X-Frame-Options header, enabling clickjacking through framing of the login page. Connected IBM bulletin confirms this and provides remedi...
CVE-2013-4778
CVE-2013-4778 affects Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before specific version updates (OpenScape Branch before 2 R0.32.0 and SBC before 7 R1.7.0). The vulnerability is exposed via core/getLog.php, allowing remote attackers to obtain sens...
