85 matches found
CVE-2023-4855
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI...
Rocky Linux 8 : postgresql:13 (RLSA-2022:4855)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:4855 advisory. - A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The...
Ubuntu 16.04 ESM : IPython vulnerability (USN-4855-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4855-1 advisory. It was discovered that IPython did not properly sanitize certain input. If a user were tricked into opening a specially crafted notebook file, a remote attacker...
MSC-2022-4855
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
Ubuntu: Security Advisory (USN-4855-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-4855
creationtimestamp| type| source ---|---|--- 2022-12-30 12:13:49+00:00| seen| https://t.me/cibsecurity/55548 2025-04-09 15:47:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11088...
CVE-2022-4855
CVE-2022-4855 affects SourceCodester Lead Management System 1.0. The login.php username parameter is vulnerable to SQL injection, enabling remote exploitation. Multiple sources confirm the issue is due to lack of input validation in login.php, with public disclosure of the exploit. Impact is desc...
CVE-2022-4855 SourceCodester Lead Management System login.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
RHEL 8 : postgresql:13 (RHSA-2022:4855)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4855 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream version:...
CentOS 8 : postgresql:13 (CESA-2022:4855)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:4855 advisory. - postgresql: Autovacuum, REINDEX, and others omit security restricted operation sandbox CVE-2022-1552 Note that Nessus has not tested for this issue but has...
Oracle Linux 8 : postgresql:13 (ELSA-2022-4855)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4855 advisory. - Resolves: CVE-2022-1552 - Resolves: CVE-2022-1552 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
CVE-2020-4855
creationtimestamp| type| source ---|---|--- 2021-01-27 20:37:36+00:00| seen| https://t.me/cibsecurity/22740...
CVE-2020-4855
The CVE-2020-4855 issue affects IBM Jazz Foundation products and is a cross-site scripting vulnerability in the Web UI that could enable an attacker to inject arbitrary JavaScript and potentially disclose credentials in a trusted session. Affected components include IBM Jazz Team Server family (E...
CVE-2019-4855
CVE-2019-4855 is rejected/not used per the Initial Description.
CVE-2013-4855
creationtimestamp| type| source ---|---|--- 2019-10-25 20:32:45+00:00| seen| https://t.me/cibsecurity/7675 2024-01-27 13:46:12+00:00| seen| https://t.me/ctinow/174764...
CVE-2013-4855
D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share...
CVE-2013-4855
CVE-2013-4855 describes a SMB Symlink Traversal in D-Link DIR-865L caused by SMB service misconfiguration that allows symbolic links to escape the Samba share. Primary sources (NVD, Red Hat, CNVD, CVE List) concur on the affected device and vulnerability class; CVSS v3.1 base score 8.8 (HIGH) wit...