91 matches found
CVE-2023-4875 Undefined Behavior for Input to API in Mutt
Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 2.2.12...
CVE-2022-4875
creationtimestamp| type| source ---|---|--- 2023-01-05 00:18:27+00:00| seen| Telegram/x3UlKlrFmpY1LbUP70qTy0Arsz2t7diHzWncIBT8trFYz4...
CVE-2022-4875 fossology cross site scripting
A vulnerability has been found in fossology and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument sql/VarValue leads to cross site scripting. The attack can be initiated remotely. The patch is identified as 8e0eba001662c7eb35f045b70dd458a4643b455...
CVE-2022-4875
CVE-2022-4875 affects Fossology. The vulnerability is a cross-site scripting flaw caused by manipulation of the parameter sql/VarValue, enabling remote exploitation. Multiple connected sources corroborate that the issue stems from unknown code within Fossology and that the patch identified as 8e0...
RHEL 8 : firefox (RHSA-2022:4875)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4875 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
CVE-2020-4875
creationtimestamp| type| source ---|---|--- 2022-01-21 20:13:19+00:00| seen| https://t.me/cibsecurity/36039...
RHEL 8 : kernel-rt (RHSA-2021:4875)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4875 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
Debian DSA-4875-1 : openssl - security update
A NULL pointer dereference was found in the signaturealgorithms processing in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service. Additional details can be found in the upstream advisory: https://www.openssl.org/news/secadv/20210325.txt C Tenable Network Security, In...
CVE-2019-4875
CVE-2019-4875 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2018-4875
Adobe Experience Manager versions 6.1 and 6.0 are vulnerable to a reflected cross-site scripting vulnerability related to the handling of malicious content embedded in image files uploaded to the DAM...
CVE-2018-4875
Adobe Experience Manager 6.0 and 6.1 are affected by a reflected cross-site scripting vulnerability (CVE-2018-4875) tied to handling of malicious content embedded in images uploaded to the DAM. The issue arises from how image files are processed, enabling a reflected XSS vector. Affected products...
APSB18-04 Security updates available for Adobe Experience Manager
Adobe has released security updates for Adobe Experience Manager. These updates resolve a reflected cross-site scripting vulnerability CVE-2018-4875 rated moderate, and a cross-site scripting vulnerability CVE-2018-4876 in Apache Sling XSS protection API rated important...
CVE-2016-4875
Multiple cross-site scripting XSS vulnerabilities in the IVYWE 1 Assist plugin before 1.1.2.test20160906, 2 dataBox plugin before 0.0.0.20160906, and 3 userBox plugin before 0.0.0.20160906 for Geeklog allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4875
CVE-2016-4875 describes cross-site scripting (CWE-79) vulnerabilities in Geeklog IVYWE edition plugins: Assist (before 1.1.2.test20160906), dataBox (before 0.0.0.20160906), and userBox (before 0.0.0.20160906). The root cause is untrusted input that can be injected into administrator-facing contex...
Oracle Enterprise Manager Agent Unspecified Vulnerabilities (October 2015 CPU)
The version of Oracle Enterprise Manager Agent installed on the remote host is affected by multiple vulnerabilities : - An unspecified vulnerability exists in the Agent Next Gen subcomponent that a remote attacker can exploit to impact confidentiality and integrity. No other details are available...
CVE-2015-4875
CVE-2015-4875 affects Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5, specifically the Agent Next Gen subcomponent. The vulnerability is described as unspecified and remotely exploitable to impact availability, with vectors for exploitation not disclosed in the provided documents. N...
CVE-2014-4875
CVE-2014-4875 : In Toshiba CHEC, the CreateBossCredentials.jar file in versions before 6.6 build 4014 and before 6.7 build 4329 contains a hard-coded AES key, enabling an attacker with access to bossinfo.pro to decrypt and obtain the BOSS DB2 credentials. The risk materializes as the potential di...
CVE-2013-4875
The CVE-2013-4875 entry concerns the U-Boot bootloader used on the Verizon Wireless Network Extender SCS-2U01. The vulnerability allows a physically proximate attacker to bypass the intended boot process and reach a login prompt by connecting a crafted HDMI cable and issuing a SysReq interrupt. T...
CVE-2012-4875
Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote attackers to execute arbitrary code via a long file name in a PostScript document. NOTE: as of 20120314, the developer was not able to reproduce the issue and...