62 matches found
SUSE SLES12: libncurses5 / libncurses5-32bit / libncurses6 / libncurses6-32bit / etc (SUSE-SU-2023:4892-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4892-1 advisory. - CVE-2023-50495: Fixed a segmentation fault via ncwrapentry bsc1218014 Tenable has extracted the preceding description block directly from...
CVE-2023-4892
CVE-2023-4892 affects Teedy v1.11, with a cross-site scripting (stored XSS) vulnerability in the text editor that lets attacker-supplied HTML/JS be executed in the web application. Impact stated: ability to run malicious JavaScript within the webapp. Exploitation details are not provided in the c...
CVE-2022-4892
creationtimestamp| type| source ---|---|--- 2023-01-19 12:21:39+00:00| seen| https://t.me/cibsecurity/56708...
CVE-2022-4892
The CVE-2022-4892 entry concerns MyCMS. Affected component: Visitors Module, build_view function in lib/gener/view.php. Issue: manipulation of the original/converted argument leads to cross-site scripting, enabling remote initiation of an attack. Patch: d64fcba4882a50e21cdbec3eb4a080cb694d26ee. A...
AlmaLinux 9 : thunderbird (ALSA-2022:4892)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:4892 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
Oracle Linux 9 : thunderbird (ELSA-2022-4892)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4892 advisory. 91.10.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires...
RHEL 9 : thunderbird (RHSA-2022:4892)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4892 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.10.0. Security Fixes: Mozilla:...
Debian: Security Advisory (DSA-4892-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4892-1 : python-bleach - security update
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when'svg' or 'math' are in the allowed tags, 'p' or 'br' are in allowed tags, 'style', 'title', 'noscript', 'script', 'textarea', 'noframes','iframe', or 'xmp' a...
CVE-2020-4892
creationtimestamp| type| source ---|---|--- 2021-01-07 20:40:47+00:00| seen| https://t.me/cibsecurity/21763...
CVE-2020-4892
IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979...
CVE-2005-4892
CVE-2005-4892 is rejected/not used; the CNA withdrew this candidate.
CVE-2019-4892
CVE-2019-4892 is rejected and does not represent an active vulnerability entry.
CVE-2011-4892
CVE-2011-4892 is rejected/not used as stated in the Initial Description.
CVE-2017-4892
CVE-2017-4892 entry is rejected/not used and does not represent an active vulnerability.
CVE-2018-4892
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JBIG2 decoder. The vulnerability is triggered by a crafted PDF...
CVE-2018-4892
CVE-2018-4892 affects Adobe Acrobat Reader versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394 and earlier. It is a use-after-free in the JBIG2 decoder triggered by a crafted PDF with a malformed JBIG2 stream, leading to arbitrary code execution. Connected records confirm the affect...