Debian: Security Advisory (DSA-4876-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4876-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4876-1 advisory. Olivier Benjamin and Pawel Wieczorkiewicz discovered a race condition the Xen paravirt block backend in the Linux kernel, leading to a use-after-free...

CVE-2019-4876

...

CVE-2019-4876

CVE-2019-4876 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-4876

...

CVE-2017-4876

CVE-2017-4876 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-4876

CVE-2018-4876 affects Adobe Experience Manager 6.1–6.3. The vulnerability is a cross-site scripting flaw caused by a bypass of the Sling XSSAPI#getValidHref function, enabling an attacker to obtain sensitive information. Adobe’s advisory APSB18-04 confirms security updates addressing CVE-2018-487...

APSB18-04 Security updates available for Adobe Experience Manager

Adobe has released security updates for Adobe Experience Manager. These updates resolve a reflected cross-site scripting vulnerability CVE-2018-4875 rated moderate, and a cross-site scripting vulnerability CVE-2018-4876 in Apache Sling XSS protection API rated important...

CVE-2016-4876

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors...

CVE-2016-4876

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors...

CVE-2016-4876

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors...

CVE-2016-4876

CVE-2016-4876 is a CSRF vulnerability affecting baserCMS up to version 3.0.10 (and related plugins). An attacker could exploit a logged-in administrator session to cause arbitrary PHP code execution on the server via unspecified vectors, effectively hijacking admin actions. Impact ranges include ...

JVN#92765814: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugins "Blog", "Mail", "Feed", and "Uploader" contain the following vulnerabilities. Cross-site request forgery CWE-352 - CVE-2016-4879, CVE-2016-4881, CVE-2016-4884, CVE-2016-4885,...

CVE-2014-4876

CVE-2014-4876 affects Toshiba 4690 OS (version 6 Release 3) where the ADXSITCF logical name is not properly restricted. A remote, unauthenticated client can read system environment variables by sending a crafted request to TCP port 54138, enabling information disclosure. The vulnerability is desc...

CVE-2015-4876

CVE-2015-4876 affects Oracle PeopleSoft Products’ PeopleTools (8.53/8.54). A vulnerability in Pivot Grid allows remote authenticated users to affect integrity via unknown vectors. The vulnerability’s root cause and exploitation are not detailed in the provided documents. The NVD entry lists a med...

CVE-2013-4876

The CVE-2013-4876 entry applies to the Verizon Wireless Network Extender SCS-2U01, where a hardcoded password for the root account enables physically proximate attackers to obtain administrative access via the device login prompt. The description documents the root cause (hardcoded root credentia...

CVE-2012-4876

Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method...

CVE-2012-4876

CVE-2012-4876 describes a stack-based buffer overflow in TRENDnet SecurView UltraMJCam ActiveX Control (OpenFileDlg method). The root cause is that the argument to OpenFileDlg is not size-checked before WideCharToMultiByte, allowing a long string to overflow the stack and potentially execute arbi...

CVE-2012-4876

creationtimestamp| type| source ---|---|--- 2012-03-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18675 2012-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18709 2018-05-29 15:50:33+00:00| seen|...

CVE-2011-4876

CVE-2011-4876 is a directory traversal vulnerability in Siemens WinCC family runtimes (WinCC flexible 2004–2008, WinCC V11/TIA Portal, and related SIMATIC HMI panels) where the runtime loader HmiLoad fails to validate strings during Transfer Mode. This allows remote attackers to access or modify ...