CVE-2022-0684

creationtimestamp| type| source ---|---|--- 2022-03-14 17:18:26+00:00| seen| https://t.me/cibsecurity/38872...

CVE-2022-0684

The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0684

CVE-2022-0684 affects the WordPress plugin “WP Home Page Menu” pre-3.1. The vulnerability stems from insufficient sanitisation/escaping of the plugin’s settings, enabling stored Cross-Site Scripting (XSS) by high-privilege users (e.g., admins) even when unfiltered_html is disallowed. The impact i...

CVE-2022-0684 WP Home Page Menu < 3.1 - Admin+ Stored Cross-Site Scripting

The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-0684

creationtimestamp| type| source ---|---|--- 2021-10-06 18:32:12+00:00| seen| https://t.me/cibsecurity/30052...

CVE-2021-0684

CVE-2021-0684 is an Android local privilege escalation affecting Android 8.1, 9, 10, and 11. The issue is described as an out-of-bounds write caused by a use-after-free in TouchInputMapper::sync, enabling a local attacker to escalate privileges without user interaction. Exploitation, if any, is n...

SUSE: Security Advisory (SUSE-SU-2021:0684-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0684

CVE-2020-0684 is a Windows remote code execution vulnerability triggered when a .LNK file is processed. The connected docs confirm that an attacker could execute code with the current user’s privileges, affecting Windows/Windows Server platforms via .LNK handling, and that patches were released i...

Microsoft Windows Multiple Vulnerabilities (KB4540689)

This host is missing a critical security update according to Microsoft KB4540689 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-0684

CVE-2019-0684 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2018-0684

creationtimestamp| type| source ---|---|--- 2018-11-15 18:22:29+00:00| seen| https://t.me/cibsecurity/1231...

CVE-2018-0684

Buffer overflow in Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier allows remote attackers to execute arbitrary code or cause a denial-of-service DoS condition via multipart/form-data format data...

CVE-2018-0684

CVE-2018-0684 is a Denbun vulnerability (Denbun POP/IMAP, affected versions V3.3P R3.0 and earlier; POP R3.0/IMAP R3.0 and earlier) where a stack-based buffer overflow in processing multipart/form-data enables remote code execution or DoS. Root cause: flaw in multipart/form-data handling. Affecte...

Security Bulletin: Security vulnerabilities in ActiveMQ 5.2.0 affect IBM Sterling B2B Integrator (CVE-2015-1830, CVE-2014-8110, CVE-2013-3060, CVE-2013-1880, CVE-2013-1879, CVE-2012-6551, CVE-2012-6092, CVE-2010-1587, CVE-2010-1244, CVE-2010-0684)

Summary Multiple directory traversal, cross-site scripting, denial of service and cross-site request forgery security vulnerabilities in ActiveMQ 5.2.0. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1830 DESCRIPTION: Apache ActiveMQ could all...

CVE-2017-0684

CVE-2017-0684 is the Android media framework elevation-of-privilege vulnerability. CNVD-2017-15960 describes it as a privilege-extraction flaw in Android’s media framework, enabling an attacker to trigger an out-of-bounds write. Affected products/versions include Android 6.0, 6.0.1, 7.0, 7.1.1, a...

CVE-2003-0684

CVE-2003-0684 entry is rejected/not used and does not represent an active vulnerability.

CVE-2003-0684

...

Oracle Linux 5 : nss / and / nspr (ELSA-2016-0684)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0684 advisory. nspr 4.11.0-0.1 - Rebase to NSPR 4.11 - Resolves: Bug 1297943 - Rebase RHEL 5.11.z to NSPR 4.11 in preparation for Firefox 45 nss 3.21.0-6 - Fix...

CentOS Update for nspr CESA-2016:0684 centos5

Check the version of nspr SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882474";...

CVE-2016-0684

CVE-2016-0684 is an unspecified vulnerability in the Oracle Retail MICROS ARS POS subcomponent of Oracle Retail Applications 1.5. Connected sources describe that a remote authenticated attacker could affect confidentiality via POS-related vectors, with CNVD stating that an attacker can access dat...