52 matches found
CVE-2022-4779 authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature
StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme. StreamX applications using StreamView HTML component with the public web server feature activated are affected...
CVE-2022-4779
CVE-2022-4779 concerns StreamX applications (versions 6.02.01–6.04.34) with the StreamView HTML component when the public web server feature is enabled. A logic bug allows bypassing the implemented authentication scheme, exposing potentially unauthenticated access. Affected components and root ca...
Debian DSA-4779-1 : openjdk-11 - security update
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which could result in denial of service, information disclosure, bypass of access/sandbox restrictions or the acceptance of untrusted certificates. C Tenable Network Security, Inc. The descriptive text and package checks in...
CVE-2020-4779
A HTTP Verb Tampering vulnerability (CVE-2020-4779) affects IBM Cúram Social Program Management 7.0.9 and 7.0.10, enabling an attacker to bypass security access controls by sending specially crafted requests. Root cause details are not fully enumerated in the provided documents, but the IBM advis...
Security Bulletin: A HTTP Verb Tampering vulnerability may impact IBM Cúram Social Program Management (CVE-2020-4779)
Summary A HTTP Verb Tampering vulnerability may impact IBM Cúram Social Program Management. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass security access controls. Vulnerability Details CVEID: CVE-2020-4779 DESCRIPTION: A HTTP Verb Tampering...
CVE-2019-4779
This CVE entry is rejected and not used; it does not represent an active issue.
CVE-2017-4779
CVE-2017-4779 is rejected/not used and does not represent an active vulnerability entry.
CVE-2012-4779
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-4779
Apple Type Services ATS in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...
CVE-2016-4779
The connected Apple security document HT207170 confirms CVE-2016-4779 affects the ATS component in OS X prior to 10.12, where processing a maliciously crafted font file can lead to arbitrary code execution or memory corruption. It documents this issue under the ATS entry in the macOS Sierra 10.12...
tuoitre.vn XSS vulnerability
Vulnerable URL: http://tuoitre.vn/tim-kiem/gool/?q="+onmouseover=alert/XSSPOSED/+" Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4779 Google Pagerank| 7...
CVE-2015-4779
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect integrity and availability via unknown vectors, a different vulnerability than CVE-2015-4774 and CVE-2015-4788...
CVE-2015-4779
CVE-2015-4779 affects Oracle Berkeley DB, specifically the Data Store component. The vulnerability is described as unspecified and exploitable by local users, with impact on integrity and availability, for the following versions: 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35. The Initial...
CVE-2013-4779
Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4779
The CVE-2013-4779 entry documents a Cross-site Scripting (XSS) vulnerability in the file core/handleTw.php for Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC). Affected versions are OpenScape Branch before 2 R0.32.0 and SBC before 7 R1.7.0 (and 7 before...
CVE-2011-4779
CVE-2011-4642 affects Splunk Web (Splunk 4.2.x before 4.2.5). The mappy.py component allows remote authenticated admins to execute arbitrary code via the sys module in a crafted request to the search app, enabling CSRF-like abuse. Upgrade to Splunk 4.2.5 or later. Note: CVE-2011-4779 is a reserva...