CVE-2022-4964

CVE-2022-4964 concerns Ubuntu’s pipewire-pulse in snap, which grants microphone access even when the audio-record snap interface is not configured. The vulnerability is evaluated with a Local attacker, Low attack complexity, Low privileges required, and no user interaction, potentially exposing c...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2023-4964 Potential open redirect vulnerability in opentext SMAX and AMX product.

Potential open redirect vulnerability in opentext Service Management Automation X SMAX versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset Management X AMX versions 2021.08, 2021.11, 2022.05, 2022.11. The vulnerability could allow attackers ...

CVE-2023-4964

CVE-2023-4964 : OpenText SMAX and AMX are affected by an open redirect vulnerability. Affected SMAX versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11; affected AMX versions: 2021.08, 2021.11, 2022.05, 2022.11. Root cause and exact exploitation details are n...

SUSE CVE-2016-4964

The mptsasfetchrequests function in hw/scsi/mptsas.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop, and CPU consumption or QEMU process crash via vectors involving s-state...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Exiv2 vulnerabilities (USN-4964-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4964-1 advisory. It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of...

CVE-2020-4964

CVE-2020-4964 affects IBM Jazz Team Server and related IBM Engineering Lifecycle Management components. The vulnerability is described as an undisclosed issue allowing an authenticated user to display a customized message within the application to phish other users. Public details from IBM’s bull...

CVE-2019-4964

CVE-2019-4964 entry is rejected and not used, per the Initial Description.

CVE-2019-4964

...

CVE-2018-4964

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-4964

CVE-2018-4964 is an out-of-bounds read vulnerability in Adobe Acrobat and Reader prior to 2018.011.20038, 2017.011.30079, and 2015.006.30417, potentially enabling information disclosure upon exploitation.

Security Bulletin: Exposed Authentication Token in IBM UrbanCode Deploy (CVE-2015-4964)

Summary In previous versions of IBM UrbanCode Deploy, the authentication token is displayed in the execution logs. In certain steps that are run using the admin user permissions, this can allow non-administrator users to impersonate the admin user. In other processes, this can allow other users t...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

CVE-2017-4964

CVE-2017-4964 concerns the Cloud Foundry Foundation BOSH Azure CPI Release v22. The vulnerability enables a maliciously crafted stemcell to execute arbitrary code on VMs created by the BOSH Director, due to a CPI code injection weakness in the Azure CPI v22. Reported impact is elevated, with loca...

CVE-2017-4964: BOSH Azure CPI code injection vulnerability | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Versions Affected BOSH Azure CPI Release v22 Description The BOSH Azure CPI could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director. Mitigation OSS users are strongly encouraged to follow the...

CVE-2016-4964

CVE-2016-4964 : In QEMU, the mptsas_fetch_requests function (hw/scsi/mptsas.c) allows a local guest OS administrator to trigger a denial of service via vectors involving s->state, potentially causing an infinite loop, CPU exhaustion, or QEMU process crash. The provided documents do not specify...

Fedora Update for qemu FEDORA-2016-a80eab65ba

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

filmstarts.de XSS vulnerability

Vulnerable URL: http://www.filmstarts.de/kinoprogramm/kino-suche/?adv2=0%2c5=1%27%20onmouseover%3dalert%28%27XSSPOSED%27%29%20rest%3d%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...