Fedora 37 : c-ares (2023-b121bd62a9)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b121bd62a9 advisory. Update to 1.19.0. Fixes CVE-2022-4904. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Debian dla-3323 : libc-ares-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3323 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3323-1 [email protected] https://www.debian.org/lts/security/...

Debian DSA-4904-1 : gst-plugins-ugly1.0 - security update

Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4904-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4904-1 advisory. Ben Harris discovered that the Linux kernel would strip extended privilege attributes of files when performing a failed unprivileged system call. A local...

Ubuntu: Security Advisory (USN-4904-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4904

creationtimestamp| type| source ---|---|--- 2020-12-17 00:41:56+00:00| seen| https://t.me/cibsecurity/20958...

CVE-2020-4904

Product: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 (Multiplatforms). Vulnerability: Cross-Site Request Forgery (CSRF) that could allow an attacker to perform malicious and unauthorized actions transmitted from a user that the website trusts. Root cause/impact: ...

CVE-2019-4904

...

CVE-2019-4904

CVE-2019-4904 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2011-4904

CVE-2011-4904 affects TYPO3 ExtDirect in TYPO3 4.4.x and 4.5.x prior to the fixed releases. The root cause is missing access control on ExtDirect calls, allowing remote attackers to retrieve ExtDirect endpoint services. Public descriptions consistently state that TYPO3 before 4.4.9 and 4.5.x befo...

CVE-2011-4904

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

Security Bulletin: Open Source VMware Fusion Vulnerabilities in IBM Pure Application System (CVE-2017-4903, CVE-2017-4904, CVE-2017-4905)

Summary Multiple vulnerabilities in Open Source VMware affects IBM PureApplication System. IBM PureApplication System has addressed Common Vulnerabilities Exposures CVE-2017-4903, CVE-2017-4904, CVE-2017-4905. Additionally this bulletin includes information about the release of fix for Common...

Adobe Acrobat and Reader Heap Overflow - VER0 (APSB18-02: CVE-2018-4904)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2018-4904

CVE-2018-4904 is a heap overflow in Adobe Acrobat Reader triggered by crafted TIFF data within an XPS file, affecting versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier; attacker could cause out-of-bounds memory access and potentially execute arbitrary...

Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

KLA11193 Multiple vulnerabilities in Adobe Arcobat&Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited to execute arbitrary...

Adobe Acrobat and Reader Heap Overflow (APSB18-02: CVE-2018-4904)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

X-Cart < 4.1.3 - Arbitrary Variable Overwrite Vulnerability

Exploit for php platform in category web applications X-Cart Arbitrary Variable Overwrite Vendor: Qualiteam Product: X-Cart Version: $value $$var = $value; As we can see every single post variable is dynamically evaluated. This is especially dangerous because register globals and magic q...

CVE-2017-4904

CVE-2017-4904 concerns VMware products with uninitialized memory usage in the XHCI controller, potentially allowing a guest to execute code on the host. Affected: VMware ESXi (versions 5.5 and later) without patches ESXi650-201703410-SG, ESXi600-201703401-SG, ESXi600-201703403-SG, ESXi600-2017034...