62 matches found
CVE-2020-4994
IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 192906...
RHEL 7 : nss (RHSA-2021:4994)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4994 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...
Ubuntu 18.04 LTS / 20.04 LTS : Apache HTTP Server vulnerabilities (USN-4994-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4994-1 advisory. Marc Stern discovered that the Apache modproxyhttp module incorrectly handled certain requests. A remote attacker could possibly use this iss...
Ubuntu 16.04 ESM : Apache HTTP Server vulnerabilities (USN-4994-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4994-2 advisory. USN-4994-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...
CVE-2019-4994
CVE-2019-4994 entry is rejected/not used per the initial description.
EulerOS 2.0 SP2 : gimp (EulerOS-SA-2019-2471)
According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program...
EulerOS 2.0 SP3 : gimp (EulerOS-SA-2019-2021)
According to the versions of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple use-after-free vulnerabilities were found in GIMP in the channel and layer properties parsing process when loading XCF files.An attacker...
APSB18-22 Security update available for Adobe Connect
Adobe has released a security update for Adobe Connect. This update resolves an important authentication bypass vulnerability CVE-2018-4994, which could result in sensitive information disclosure if successfully exploited. This update also resolves an important session management vulnerability du...
CVE-2018-4994
Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2018-4994
CVE-2018-4994 affects Adobe Connect 9.7.5 and earlier, with an exploitable authentication bypass leading to potential sensitive information disclosure. Connected sources confirm multiple advisories (APSB18-22) and the vendor update that fixes these issues in versions released after 9.7.5, notably...
CVE-2018-4994
Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lead to sensitive information disclosure...
Adobe Connect <= 9.7.4 Sensitive Information Disclosure Vulnerability (APSB18-18)
The version of Adobe Connect installed on the remote host is prior to 9.7.5. It is, therefore, affected by a vulnerability as referenced in the apsb18-18 advisory. - Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lea...
CVE-2014-4994
lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames...
CVE-2014-4994
CVE-2014-4994 affects the gyazo Ruby gem (v1.0.0). The issue is in lib/gyazo/client.rb, where a symlink attack on a time-based temporary file allows local users to write to arbitrary files. The impact stated in connected sources is local access with partial integrity impact and no confidentiality...
CVE-2017-4994
CVE-2017-4994 affects Cloud Foundry components including cf-release prior to v263 and UAA releases earlier than v2.7.4.18 (2.x), v3.6.12 (3.6.x), v3.9.14 (3.9.x), and v4.3.0+ for other lines, plus UAA Bosh releases prior to v13.16, v24.11, and v30.4. The issue is with forwarded HTTP headers in UA...
CVE-2017-4994
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions prior to v3.9.14, and other versions prior to v4.3.0; and UAA bosh release uaa-release 13.x versions prior to v13.16,...
CVE-2011-4994
CVE-2011-4994 is rejected/not used and does not represent an active vulnerability entry.
EulerOS 2.0 SP1 : gimp, gimp-help (EulerOS-SA-2016-1075)
According to the version of the gimp, gimp-help packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple use-after-free vulnerabilities were found in GIMP in the channel and layer properties parsing process when loading XCF files.An...