WordPress Active Directory Integration / LDAP Integration Plugin <= 4.1.4 is vulnerable to SQL Injection

Software Active Directory Integration / LDAP Integration Type Plugin Vulnerable versions = 4.1.4 Fixed in 4.1.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2484 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 166c0938a64d Credits Marco Wotschka...

Debian: Security Advisory (DSA-2310-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-2484

creationtimestamp| type| source ---|---|--- 2023-01-07 00:24:28+00:00| seen| https://t.me/cibsecurity/56075...

CVE-2022-2484

The vulnerability CVE-2022-2484 affects Nokia ASIK AirScale system module version 474021A.101. The Red Hat/CISA/NVD records describe a bypass of the module’s signature check, enabling an attacker to run modified firmware, which could lead to execution of a malicious kernel, arbitrary programs, or...

CVE-2021-2484

CVE-2021-2484 affects Oracle E-Business Suite Operations Intelligence (component BIS Operations Intelligence) in versions 12.1.1–12.1.3. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise data integrity and confidentiality, enabling unauthorized creation, ...

CVE-2021-2484

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: BIS Operations Intelligence. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

SUSE: Security Advisory (SUSE-SU-2014:1072-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-2484)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2484

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

CVE-2019-2484

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

CVE-2018-2484

SAP Enterprise Financial Services fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.6320 does not perform necessary authorization checks for an authenticated user, resulting in escalation of...

CVE-2018-2484

SAP Enterprise Financial Services fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.6320 does not perform necessary authorization checks for an authenticated user, resulting in escalation of...

CVE-2018-2484

CVE-2018-2484 (SAP Enterprise Financial Services) is a privilege-escalation vulnerability caused by a failure to perform necessary authorization checks for an authenticated user. The affected stack includes SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15), S4CORE (1.01–1.03)...

Oracle Linux 7 : git (ELSA-2017-2484)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2484 advisory. 1.8.3.1-12 - prevent command injection via malicious ssh URLs Resolves: CVE-2017-1000117 Tenable has extracted the preceding description block directly from the...

CVE-2017-2484

CVE-2017-2484 affects iOS prior to 10.3 in the Phone component, enabling a third‑party app to trigger a call to arbitrary numbers without user interaction. The issue was addressed by requiring user confirmation before initiating a call. Affected devices included iPhone/iPad generations supported ...

CVE-2016-2484

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature ...

CVE-2016-2484

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature ...

CVE-2016-2484

CVE-2016-2484 affects libstagefright in mediaserver across Android 4.x up to 4.4.4, 5.x up to 5.0.2/5.1.1, and 6.x prior to 2016-06-01. The issue is that OMX buffer sizes for GSM and G711 codecs are not validated, enabling a crafted app to escalate privileges to Signature or SignatureOrSystem. Pr...

SUSE: Security Advisory for MySQL (SUSE-SU-2014:1072-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...