Mozilla Firefox ESR < 115.23.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.23.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-38 advisory. - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index...

CVE-2024-4918

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:23+00:00| seen| Telegram/fOmpjUU8780JHYzs1gqspyqBhxCfR-SYORAYFTyWxciNPi...

SUSE-SU-2024:4105-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: - Update to Tomcat 10.1.33 Fixed CVEs: + CVE-2024-52316: If the Jakarta Authentication fails with an exception, set a 500 status bsc1233434 Catalina + Add: Add support for the new Servlet API method HttpServletResponse.sendEarlyHints. markt +...

CVE-2024-4918 Campcodes Online Examination System updateQuestion.php sql injection

A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. This affects an unknown part of the file updateQuestion.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-4918 Campcodes Online Examination System updateQuestion.php sql injection

A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. This affects an unknown part of the file updateQuestion.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-4918

CVE-2024-4918 affects Campcodes Online Examination System 1.0. The issue resides in the file updateQuestion.php, where manipulation of the parameter id leads to a SQL injection vulnerability. The vulnerability can be exploited remotely and has been disclosed publicly. Multiple sources corroborate...

CVE-2023-4918

creationtimestamp| type| source ---|---|--- 2023-09-13 00:23:09+00:00| seen| https://t.me/cibsecurity/70343...

CVE-2023-4918

The CVE-2023-4918 entry concerns Keycloak (org.keycloak.userprofile) where password and password-confirm fields submitted during self-registration become regular user attributes. The described flaw allows any user with proper rights to read user attributes and retrieve passwords in clear text, po...

CVE-2022-4918

Use after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2022-4918

Use after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Medium...

CVE-2022-4918

CVE-2022-4918 affects Google Chrome (Chromium UI) with a use-after-free in the UI, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. Affected versions are Chrome before 102.0.5005.61; the issue stems from a post-release reuse problem in the UI. The documented imp...

CVE-2022-4918

Use after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Medium...

Ubuntu: Security Advisory (USN-4918-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4918-1 : ruby-rack-cors - security update

Improper pathname handling in ruby-rack-cors, a middleware that makes Rack-based apps CORS compatible, may result in access to private resources. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

CVE-2020-4918

IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392...

CVE-2019-4918

This CVE entry is rejected/not used as stated in the Initial Description.

CVE-2018-4918

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4918

CVE-2018-4918 affects Adobe Acrobat/Reader (Windows, across multiple tracks and versions up to 2018.009.20050, 2017.011.30070, 2015.006.30394) with an exploitable out-of-bounds write in TIFF/EMF image parsing that can lead to remote arbitrary code execution in the context of the current user. The...

Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...