94 matches found
CVE-2022-4924
Use after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2022-4924
Use after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2022-4924
Use after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2022-4924
CVE-2022-4924 is a use-after-free in WebRTC in Google Chrome, prior to 97.0.4692.71. The renderer must be compromised to potentially escape the sandbox via a crafted HTML page. Affected product: Google Chrome before 97.0.4692.71. Root cause: use-after-free in WebRTC. Impact stated: high/critical,...
K6736: OpenSSH vulnerabilities CAN-2006-5051, CAN-2006-4924
Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribe to email notifications regarding F5 products and security announcements. Note : Versions that are not listed in this article have not been evaluated for...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Debian DSA-4924-1 : squid - security update
Multiple denial of service vulnerabilities were discovered in the Squid proxy caching server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4924. The text itself is copyright C Software ...
Ubuntu: Security Advisory (USN-4924-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4924
CVE-2019-4924 entry is rejected/not used and does not represent an active vulnerability.
CVE-2011-4924
creationtimestamp| type| source ---|---|--- 2019-11-25 20:32:11+00:00| seen| https://t.me/cibsecurity/8298 2024-02-27 07:11:23+00:00| seen| https://t.me/ctinow/194039...
CVE-2011-4924
Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...
CVE-2011-4924
CVE-2011-4924 is a Zope XSS vulnerability: multiple Zope 2.x branches (2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, as well as 3.1.1–3.4.1) allow remote attackers to inject arbitrary web script or HTML via error-message sanitizat...
NewStart CGSL CORE 5.04 / MAIN 5.04 : openssh Multiple Vulnerabilities (NS-SA-2019-0036)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssh packages installed that are affected by multiple vulnerabilities: - scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded...
CVE-2018-4924
CVE-2018-4924 affects Adobe Dreamweaver CC versions 18.0 and earlier. An OS command injection in the Dreamweaver URI handler could allow arbitrary code execution in the context of the current user. The issue is documented across multiple sources (NVD and Adobe APSB18-07). Remediation is available...
Adobe Dreamweaver 18.0 < 18.1 Arbitrary Code Execution (APSB18-07)
The version of Adobe Dreamweaver installed on the remote Windows host is prior to 18.1. It is, therefore, affected by a vulnerability as referenced in the APSB18-07 advisory. - Adobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability. Successful exploitation could...
APSB18-07 Security update available for Adobe Dreamweaver CC
Adobe has released a security update for Adobe Dreamweaver CC. This update resolves a critical OS command injection vulnerability in the Dreamweaver URI handler on Windows CVE-2018-4924 that could result in arbitrary code execution in the context of the current user...
Solaris 10 (sparc) : 123324-03
SunOS 5.10: sshd patch. Date this patch was last updated by Sun : Jun/20/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2016-4924
CVE-2016-4924 affects Juniper Networks Junos OS on vMX. The issue is an incorrect permissions vulnerability that allows local unprivileged users to read the vMX/vPFE images on the host and expose sensitive information, such as private cryptographic keys. Affected releases are Junos OS 15.1 prior ...
VMware Workstation 12.x < 12.5.7 Multiple Vulnerabilities (VMSA-2017-0015)
The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.7. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists in VMware workstation within the SVGA device. An attacker with user access can exploit this t...