Security Bulletin: Vulnerability in REST API affects IBM License Metric Tool and IBM Endpoint Manager for Software Use Analysis (CVE-2015-4929)

Summary Vulnerability in REST API present in IBM License Metric Tool and IBM Endpoint Manager for Software Use Analysis allows for extraction of information. Vulnerability Details CVEID: CVE-2015-4929 DESCRIPTION: IBM License Metric Tool could allow an authenticated attacker to extract sensitive...

Important: Red Hat Security Advisory: rh-postgresql13-postgresql security update

An update for rh-postgresql13-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Debian DSA-4929-1 : rails - security update

Multiple security issues were discovered in the Rails web framework which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4929. The text itself is...

SUSE: Security Advisory (SUSE-SU-2013:0554-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:0549-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:1450-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4929

IBM QRadar SIEM is affected by CVE-2020-4929, a Cross-Site Scripting (XSS) vulnerability in the Web UI. Affected versions include QRadar 7.3.0–7.3.3 Patch 7 and 7.4.0–7.4.2 Patch 2. The underlying issue permits embedding arbitrary JavaScript in the Web UI, with potential credential disclosure wit...

Security Bulletin: IBM QRadar SIEM is vulnerable to Cross Site Scripting (XSS) (CVE-2020-4929)

Summary IBM QRadar SIEM is vulnerable to Cross Site Scripting Vulnerability Details CVEID: CVE-2020-4929 DESCRIPTION: IBM QRadar SIEM is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Bind vulnerabilities (USN-4929-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4929-1 advisory. Greg Kuechle discovered that Bind incorrectly handled certain incremental zone updates. A remote attacker could possibly use this...

CVE-2019-4929

...

CVE-2019-4929

CVE-2019-4929 entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-4929

Adobe Experience Manager (AEM) up to version 6.2 is affected by CVE-2018-4929, a stored XSS vulnerability in input handling that could lead to sensitive information disclosure when exploited. The issue is documented across multiple sources (NVD/NVD listing and related advisories) and is addressed...

Exploit for CVE-2012-4929

CRIME-poc CRIME attack : a compression oracle attacks CVE-20...

APSB18-10 Security updates available for Adobe Experience Manager

Adobe has released security updates for Adobe Experience Manager. These updates resolve a stored cross-site scripting vulnerability CVE-2018-4929 rated moderate, and two cross-site scripting vulnerabilities CVE-2018-4930 and CVE-2018-4931 rated important...

CVE-2017-4929

CVE-2017-4929 affects VMware NSX Edge: XSS vulnerability in NSX Edge 6.2.x (before 6.2.9) and 6.3.x (before 6.3.5) that may lead to information disclosure. The issue is described as a moderate Cross-Site Scripting vulnerability. Remediation: upgrade to NSX Edge 6.2.9 or 6.3.5 (as per VMware advis...

VMSA-2017-0019:NSX for vSphere update addresses NSX Edge Cross-Site Scripting (XSS) issue.

VMSA-2017-0019 NSX for vSphere update addresses NSX Edge Cross-Site Scripting XSS issue. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0019 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: NSX for vSphere update addresses NSX Edge Cross-Sit...

CVE-2012-4929

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2017-10-17 20:54:29+00:00| seen| https://t.me/informationsecuritychannel/10087 2020-02-21 20:52:02+00:00| seen| https://t.me/cibsecurity/10017 2023-11-28 11:34:55+00:00| seen|...

CVE-2016-4929

Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user...

CVE-2016-4929

Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user...

CVE-2016-4929

The CVE-2016-4929 vulnerability affects Juniper Networks Junos Space prior to version 15.2R2. It enables a command-injection that allows an attacker to execute arbitrary code with root privileges on affected devices. The issue stems from improper handling of input in the Junos Space management in...