59 matches found
CVE-2022-4892
The CVE-2022-4892 entry concerns MyCMS. Affected component: Visitors Module, build_view function in lib/gener/view.php. Issue: manipulation of the original/converted argument leads to cross-site scripting, enabling remote initiation of an attack. Patch: d64fcba4882a50e21cdbec3eb4a080cb694d26ee. A...
AlmaLinux 9 : thunderbird (ALSA-2022:4892)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:4892 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
Oracle Linux 9 : thunderbird (ELSA-2022-4892)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4892 advisory. 91.10.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires...
RHEL 9 : thunderbird (RHSA-2022:4892)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4892 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.10.0. Security Fixes: Mozilla:...
Debian DSA-4892-1 : python-bleach - security update
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when'svg' or 'math' are in the allowed tags, 'p' or 'br' are in allowed tags, 'style', 'title', 'noscript', 'script', 'textarea', 'noframes','iframe', or 'xmp' a...
Debian: Security Advisory (DSA-4892-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4892
creationtimestamp| type| source ---|---|--- 2021-01-07 20:40:47+00:00| seen| https://t.me/cibsecurity/21763...
CVE-2020-4892
IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979...
CVE-2005-4892
CVE-2005-4892 is rejected/not used; the CNA withdrew this candidate.
CVE-2019-4892
CVE-2019-4892 is rejected and does not represent an active vulnerability entry.
CVE-2011-4892
CVE-2011-4892 is rejected/not used as stated in the Initial Description.
CVE-2017-4892
CVE-2017-4892 entry is rejected/not used and does not represent an active vulnerability.
CVE-2018-4892
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JBIG2 decoder. The vulnerability is triggered by a crafted PDF...
CVE-2018-4892
CVE-2018-4892 affects Adobe Acrobat Reader versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394 and earlier. It is a use-after-free in the JBIG2 decoder triggered by a crafted PDF with a malformed JBIG2 stream, leading to arbitrary code execution. Connected records confirm the affect...
Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...
Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat and Reader Use After Free (APSB18-02: CVE-2018-4892)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...