CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

Debian: Security Advisory (DSA-4846-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4846

creationtimestamp| type| source ---|---|--- 2020-12-17 22:43:04+00:00| seen| https://t.me/cibsecurity/21016...

CVE-2020-4846

CVE-2020-4846 affects IBM Security Key Lifecycle Manager 3.0.1 and 4.0. An information disclosure vulnerability could allow a remote attacker to obtain sensitive data via a detailed technical error message returned in the browser. The issue is documented in NVD and CNVD entries and is addressed b...

Moderate: Red Hat Security Advisory: mingw-expat security update

An update for mingw-expat is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

CVE-2018-4846

The CVE-2018-4846 entry concerns Siemens Healthineers RAPIDLab 1200, RAPIDPoint 400/500 blood gas analyzers. A factory account with a hardcoded password may be used to access the device over port 5900/tcp. Exploitation requires no user interaction or privileges and can impact confidentiality, int...

CVE-2017-4846

CVE-2017-4846 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-10944

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-10944

Foxit Reader 8.3.0.14878 and earlier is affected by CVE-2017-10944 due to an out-of-bounds read in the ObjStm object parsing. The flaw stems from improper validation of input data, enabling an information disclosure vulnerability when a user opens a malicious PDF or visits a crafted page; exploit...

CVE-2017-10944

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2008-4846

CVE-2008-4846 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2008-4846

...

CVE-2016-4846

PhishWall Client Internet Explorer installer is affected. The DLL search path issue stems from an old InstallShield in versions up to 3.7.8.1 (and before 3.7.8.2), allowing insecure loading of DLLs. Impact: arbitrary code execution with the user’s privileges when running the installer. Exploitati...

[ERPSCAN-15-026] Oracle E-Business Suite - SQL injection Vulnerability

ADVISORY INFORMATION Title: Oracle E-Business Suite SQL injection Advisory ID: ERPSCAN-15-026 Advisory URL: http://erpscan.com/advisories/erpscan-15-026-oracle-e-business-suite-sql-injection-vulnerability/ Date published: 20.10.2015 Vendors contacted: Oracle 2. VULNERABILITY INFORMATION Class:...

CVE-2015-4846

CVE-2015-4846 affects Oracle E-Business Suite (notably 12.1.3/12.1.4) via the Applications Manager SQL Extensions. The root cause is an unfiltered input in SQL extensions (afamexts.sql), enabling SQL injection by an authenticated remote attacker to view/modify data. Exploitation is described in E...

CVE-2014-4846

Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...

CVE-2014-4846

Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...

CVE-2014-4846

CVE-2014-4846 refers to a Cross-Site Scripting (XSS) vulnerability in the Meta Slider (ml-slider) WordPress plugin version 2.5. The issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php. Concrete details show the affected software componen...

[security bulletin] HPSBMU02947 rev.1 - HP System Management Homepage (SMH) Running on Linux and Windows, Remote Disclosure of Information and Cross-Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04039138 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04039138 Version: 1 HPSBMU02947 rev....