Oracle Linux 9 : rsyslog (ELSA-2022-4795)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4795 advisory. 8.2102.0-101.1 - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz2081402 Tenable has extracted the preceding description block...

CVE-2020-4795

creationtimestamp| type| source ---|---|--- 2021-02-09 18:40:31+00:00| seen| https://t.me/cibsecurity/23299...

CVE-2020-4795

IBM Security Identity Governance and Intelligence 5.2.6 is affected by CVE-2020-4795, a information disclosure vulnerability exploitable via a specially crafted HTTP request. The issue allows an unauthorized user to obtain sensitive data, and IBM’s own bulletin ties it to the forgot password endp...

Debian DSA-4795-1 : krb5 - security update

Demi Obeneour discovered that unbounded recursion in the ASN1 parser of libkrb5 could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4795. The text itself is copyright C Software...

CVE-2019-4795

...

CVE-2017-4795

CVE-2017-4795 is rejected and does not represent an active vulnerability entry.

CVE-2017-4795

...

CVE-2012-4795

CVE-2012-4795 entry is rejected/not used and does not represent an active vulnerability.

CVE-2011-4795

CVE-2011-4795 is rejected/not used; the candidate was not associated with any vulnerability.

CVE-2011-4795

...

CVE-2012-4795

...

CVE-2015-4795

Unspecified vulnerability in the Oracle Utilities Work and Asset Management component in Oracle Industry Applications 1.9.1.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Add-On Applications...

CVE-2015-4795

Technical details for CVE-2015-4795 are not publicly available in the provided documents. Monitor for updates from official sources for affected products, impact, and remediation.

CVE-2013-4795

CVE-2013-4795 describes a cross-site scripting (XSS) vulnerability in the Submitters list of Review Board. The issue affects Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12, allowing remote attackers to inject arbitrary script/HTML via a user’s full name. The root cause is unsanitized us...

CVE-2013-4795

Cross-site scripting XSS vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name...

CVE-2010-4795

SQL injection vulnerability in the JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the evid parameter in a details action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-4795

CVE-2010-4795: A SQL injection vulnerability affects the Joomla! JS Calendar (com_jscalendar) component versions 1.5.1 and 1.5.4. The flaw allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. Underlying issue is improper handling of u...

CVE-2010-4795

creationtimestamp| type| source ---|---|--- 2010-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15224...

CVE-2009-4795

CVE-2009-4795 : In Xlight FTP Server prior to 3.2.1, when ODBC authentication is enabled, remote attackers can trigger SQL injection through the USER (username) or PASS (password) commands. The underlying issue is the server processing user-supplied credentials in SQL without proper validation, a...

CVE-2009-4795

creationtimestamp| type| source ---|---|--- 2009-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32877...