129 matches found
CVE-2025-0437
Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Photon OS 3.0: Open PHSA-2022-3.0-0437
An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0437. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2024-0437
The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the API. This makes it possible for authenticated attackers, with subscriber access or...
CVE-2024-0437 Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure
The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the API. This makes it possible for authenticated attackers, with subscriber access or...
CVE-2024-0437
CVE-2024-0437 affects Password Protected – Password Protect your WordPress Content with Ease (WordPress plugin). All versions up to 2.6.6 are vulnerable to Sensitive Information Exposure via the API, allowing authenticated attackers with subscriber access or higher to extract post titles and cont...
WordPress Password Protected Plugin <= 2.6.6 is vulnerable to Broken Access Control
Software Password Protected Type Plugin Vulnerable versions = 2.6.6 Fixed in 2.6.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0437 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9ba2b44f0023 Credits Francesco Carlucci Required...
SUSE: Security Advisory (SUSE-SU-2024:0437-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 9 : grub2 (RHSA-2024:0437)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0437 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...
RHSA-2024:0437
creationtimestamp| type| source ---|---|--- 2024-01-24 16:21:30+00:00| seen| https://t.me/ctinow/172885...
Fedora 38 : mongo-c-driver (2024-fb4958e901)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fb4958e901 advisory. - fix: bsonutf8validate on some inputs leads to an infinite loop CVE-2023-0437 Tenable has extracted the preceding description block directly from t...
CVE-2023-0437
creationtimestamp| type| source ---|---|--- 2024-01-12 15:26:31+00:00| seen| https://t.me/ctinow/167313 2024-02-02 18:11:36+00:00| seen| https://t.me/ctinow/178205...
CVE-2023-0437 MongoDB client C Driver may infinitely loop when validating certain BSON input data
When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...
CVE-2023-0437
The CVE-2023-0437 issue affects the MongoDB C Driver: all versions prior to 1.25.0 are vulnerable due to a loop in bson_utf8_validate that may exit never, potentially causing an infinite loop. This is supported by multiple sources in connected data (MongoDB advisory, Debian/LTS entries, and distr...
CVE-2023-0437
When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...
CVE-2023-0437
When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...
SUSE CVE-2013-0437
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
@abc.xyz/drop-down-treeview (>=0.0.15 <=0.0.16), @abcpros/bitcore-build (>=8.25.29 <=8.25.30) +1332 more potentially affected by CVE-2022-0437 via karma (>=0.10.2 <=6.3.13)
karma NPM version =0.10.2, =0.0.15, =8.25.29, =1.0.0, =0.1.1, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =5.0.0, =0.23.0, =2.3.0, =2.11.0 and more Source cves: CVE-2022-0437 Source advisory: OSV:GHSA-7X7C-QM48-PQ9C...
CVE-2022-0437
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
CVE-2022-0437
Summary: The CVE-2022-0437 issue affects the karma-runner project (NPM package karma) prior to 6.3.14, with a DOM-based cross-site scripting vulnerability in the client-side DOM. The underlying cause is a DOM-based XSS condition that could allow arbitrary JavaScript execution in the victim’s brow...
