96 matches found
CVE-2023-4874 Undefined Behavior for Input to API in Mutt
Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 2.2.12...
CVE-2023-4874 Undefined Behavior for Input to API in Mutt
Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 2.2.12...
CVE-2023-4874
CVE-2023-4874 affects mutt and is a null pointer dereference vulnerability triggered when viewing a specially crafted email (and also when composing from a crafted draft) in Mutt versions older than 2.2.12. The issue can lead to denial of service (crash) and is rated with availability impact in t...
CVE-2023-4874 Undefined Behavior for Input to API in Mutt
Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 2.2.12...
Critical Security Vulnerabilities Discovered in Netcomm and TP-Link Routers
Security vulnerabilities have been disclosed in Netcomm and TP-Link routers, some of which could be weaponized to achieve remote code execution. The flaws, tracked as CVE-2022-4873 and CVE-2022-4874, concern a case of stack-based buffer overflow and authentication bypass and impact Netcomm router...
CVE-2022-4874
creationtimestamp| type| source ---|---|--- 2023-01-12 00:30:34+00:00| seen| https://t.me/cibsecurity/56380 2023-01-18 16:47:18+00:00| published-proof-of-concept| https://t.me/ctinow/87639 2023-01-19 13:10:07+00:00| published-proof-of-concept| https://t.me/truesecator/3959...
CVE-2022-4874
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL .css, .png etc. If it exists, it performs a "fake logi...
CVE-2022-4874
CVE-2022-4874 affects Netcomm NF20MESH, NF20 and NL1902 router models. An authentication bypass exists where the app serves static content by checking the URL for specific characters (e.g., .css, .png) and performing a “fake login” to grant a active session, allowing unauthenticated access to con...
CVE-2022-4874 Authenticated bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows unauthenticated user to get access to content.
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL .css, .png etc. If it exists, it performs a "fake logi...
CVE-2022-4874
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL .css, .png etc. If it exists, it performs a “fake logi...
Debian DSA-4874-1 : firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing attacks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
CVE-2018-4874
CVE-2018-4874 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2017-4874
CVE-2017-4874 entry is rejected/not used; not an active vulnerability entry.
CVE-2016-4874
Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack...
CVE-2016-4874
CVE-2016-4874 affects Cybozu Office (versions 9.0.0 through 10.4.0). The vulnerability is a Reflected File Download (RFD) that could enable remote attackers to cause unintended files to be downloaded when a logged-in user visits a malicious page. Root cause details are not explicitly provided in ...
Oracle Enterprise Manager Agent Unspecified Vulnerabilities (October 2015 CPU)
The version of Oracle Enterprise Manager Agent installed on the remote host is affected by multiple vulnerabilities : - An unspecified vulnerability exists in the Agent Next Gen subcomponent that a remote attacker can exploit to impact confidentiality and integrity. No other details are available...
CVE-2015-4874
CVE-2015-4874 is described as an unspecified vulnerability in the Agent Next Gen subcomponent of Oracle Enterprise Manager Grid Control, affecting versions 12.1.0.4 and 12.1.0.5. The vulnerability is exploitable by a local attacker and can impact confidentiality, integrity, and availability. The ...