Virtuozzo Linux Errata and Security Advisory 2020:4946 Important

Upstream security update. Follow RHSA-2020:4946 for details...

Oracle Linux 6 : libX11 (ELSA-2020-4946)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4946 advisory. 1.6.4-4 - Fix CVE-2020-14363 1873920 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

CVE-2019-4946

...

CVE-2019-4946

CVE-2019-4946 is rejected and not used; does not represent an active vulnerability entry.

CVE-2018-4946

CVE-2018-4946 affects Adobe Photoshop CC, specifically versions 19.1.3 and earlier, 18.1.3 and earlier, and 18.1.2 and earlier. It is described as an out-of-bounds write vulnerability that, if exploited, could lead to arbitrary code execution in the context of the current user (no user interactio...

Adobe Doles Out Second Round of Higher Priority Patches

A week after issuing updates on Patch Tuesday, Adobe has posted patches for a second slew of 24 critical vulnerabilities, which have a higher risk of being exploited. This week’s crop of vulnerabilities, of which there were 47 overall, impact versions of Adobe’s Acrobat DC Acrobat Reader DC, and...

Adobe Releases Critical Security Updates for Acrobat, Reader and Photoshop CC

Adobe has just released new versions of its Acrobat DC, Reader and Photoshop CC for Windows and macOS users that patch 48 vulnerabilities in its software. A total of 47 vulnerabilities affect Adobe Acrobat and Reader applications, and one critical remote code execution flaw has been patched in...

Adobe Acrobat and Reader Use After Free (APSB18-09: CVE-2018-4946)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2017-4946

creationtimestamp| type| source ---|---|--- 2018-01-10 23:43:24+00:00| seen| https://t.me/canyoupwnme/3007...

CVE-2017-4946

CVE-2017-4946 affects VMware vRealize Operations for Published Applications/Desktop Agent (V4PA/V4H) 6.x prior to 6.5.1. A privilege escalation vulnerability exists that could allow a local, low-privilege user to escalate to SYSTEM on Windows. The issue is documented in VMware’s VMSA-2018-0003 an...

CVE-2017-4946

The VMware V4H and V4PA desktop agents 6.x before 6.5.1 contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM. Recent assessments: ccondon-r7 at July 26, 2024 1:30pm UTC reported:...

VMSA-2018-0003:vRealize Operations for Horizon, vRealize Operations for Published Applications, Workstation, Horizon View Client and Tools updates resolve multiple security vulnerabilities

VMSA-2018-0003 vRealize Operations for Horizon, vRealize Operations for Published Applications, Workstation, Horizon View Client and Tools updates resolve multiple security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0003 VMware Security Advisory...

Cloudera HUE =< 3.9.0 is vulnerable to multiple stored XSS (CVE-2016-4946)

Cloudera HUE = 3.9.0 is vulnerable to multiple stored XSS: In the Username, First name and Last name fields of a user profile. This can be triggered while logging in with the account. In the Group Name field of group creation. This can be triggered when sharing an item...

CVE-2016-4946

Multiple cross-site scripting XSS vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 First name or 2 Last name field in the HUE Users page...

CVE-2016-4946

CVE-2016-4946 affects Cloudera Hue up to version 3.9.0, with multiple stored XSS in the HUE Users page (First name/Last name) and in group-name handling. The issue arises from unsanitized input fields allowing injection of script/HTML; exploitation is possible remotely and may require user intera...

CVE-2016-4946

Multiple cross-site scripting XSS vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 First name or 2 Last name field in the HUE Users page...

CVE-2015-4946

Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x...

CVE-2015-4946

CVE-2015-4946 affects IBM CLM/Jazz-based products (RCLM, RQM, RTC, RRC, RDNG, RELM, Rhapsody DM, RSA DM) and related Jazz Team Server components. The issue allows an authenticated user to bypass access restrictions and perform unauthorized actions due to a design/logic flaw in IBM Rational LifeCy...

DEBIAN-CVE-2014-4946

Multiple cross-site scripting XSS vulnerabilities in Horde Internet Mail Program IMP before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via 1 unspecified flags or 2 a mailbox name in the dynamic mailbox view...

CVE-2014-4946

Multiple cross-site scripting XSS vulnerabilities in Horde Internet Mail Program IMP before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via 1 unspecified flags or 2 a mailbox name in the dynamic mailbox view...