CVE-2022-4928

creationtimestamp| type| source ---|---|--- 2023-03-06 07:12:29+00:00| seen| https://t.me/cibsecurity/59447...

Debian DSA-4928-1 : htmldoc - security update

A buffer overflow was discovered in HTMLDOC, a HTML processor that generates indexed HTML, PS, and PDF, which could potentially result in the execution of arbitrary code. In addition a number of crashes were addressed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Ubuntu: Security Advisory (USN-4928-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GStreamer Good Plugins vulnerabilities (USN-4928-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4928-1 advisory. It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly use this issue to cau...

Security Bulletin: Infosphere BigInsights is affected by a vulnerability that could allow a local attacker to obtain the value-add services passwords stored in the Ambari configuration file (CVE-2015-4928, CVE-2015-4940).

Summary Infosphere BigInsights is affected by a vulnerability that could allow a local attacker to obtain value-add services passwords stored in the Ambari configuration file. The passwords are shown in plain text CVE-2015-4928, CVE-2015-4940. Vulnerability Details CVEID: CVE-2015-4928 DESCRIPTIO...

CVE-2020-4928

creationtimestamp| type| source ---|---|--- 2021-01-04 17:03:23+00:00| seen| https://t.me/cibsecurity/21527...

CVE-2020-4928

IBM Cloud Pak System 2.3 is affected by CVE-2020-4928, where a local privileged attacker can upload arbitrary files by intercepting requests and modifying the file extension, potentially enabling arbitrary code execution on the server. The vulnerability affects the IBM Cloud Pak System 2.3 line a...

CVE-2019-4928

...

CVE-2019-4928

CVE-2019-4928 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-4928

Adobe InDesign versions 13.0 and below are affected by a memory corruption vulnerability (CVE-2018-4928) that could allow arbitrary code execution in the context of the current user. The issue is documented across multiple feeds (NVD, Nessus/OpenVAS entries) and is triggered via exploiting memory...

Adobe InDesign CC < 13.1 Multiple Vulnerabilities (APSB18-11) (macOS)

The version of Adobe InDesign CC installed on the remote macOS or Mac OS X host is prior to 13.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid109031; scriptversion"1.5";...

Adobe InDesign Multiple Vulnerabilities (APSB18-11) - Mac OS X

Adobe InDesign is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...

CVE-2014-4928

CVE-2014-4928 describes an SQL injection in Invision Power Board (IPB/IP.Board) prior to version 3.4.6. The vulnerability allows a remote attacker to execute arbitrary SQL commands through the cId parameter. Multiple connected documents corroborate the affected product (IPB/IP.Board) and the vuln...

CVE-2017-4928

The flash-based vSphere Web Client 6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers toward...

CVE-2017-4928

CVE-2017-4928 affects the Flash-based vSphere Web Client (not the HTML5 client). The issue stems from improper neutralization of URLs, enabling SSRF and CRLF injection that could allow an attacker to send a crafted POST request towards internal services and disclose information. Affected VMware p...

KLA11142 DoS and OSI vulnerabilities in VMware products

Multiple serious vulnerabilities have been found in VMware vCenter Server and vSphere Web Client. Malicious users can exploit these vulnerabilities to cause denial of service or disclose sensetive information. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in VMware...

CVE-2016-4928

Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space...

CVE-2016-4928

The provided connected documents confirm CVE-2016-4928 as a Cross-Site Request Forgery vulnerability in Junos Space prior to version 15.2R2. The root cause is CSRF that allows remote attackers to perform certain administrative actions on Junos Space. Affected software is Junos Space (version

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10760)

Juniper Networks Junos Space is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-4928

The CVE-2015-4928 issue affects Apache Ambari 2.1 as used in IBM InfoSphere BigInsights 4.x before 4.1, where the Configs screen displays passwords in cleartext. This allows a local attacker with access to the Ambari UI to read sensitive passwords by viewing the configuration screens. IBM’s secur...