69 matches found
CVE-2022-3794
creationtimestamp| type| source ---|---|--- 2022-12-23 00:14:05+00:00| seen| https://t.me/cibsecurity/55200...
CVE-2022-3794
Summary: CVE-2022-3794 affects the WordPress plugin Jeg Elementor Kit up to version 2.5.6. The issue is an authorization bypass in various AJAX actions where an authenticated user can exploit an easily available nonce value due to missing capability checks. What is affected: Jeg Elementor Kit plu...
CVE-2022-3794 Jeg Elementor Kit <= 2.5.6 - Authorization Bypass
The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticated users can use an easily available nonce value to create header templates and make additional changes to the site, as the plugin does not...
CVE-2021-36165
RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...
SUSE: Security Advisory (SUSE-SU-2013:1529-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1390-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-3794
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory...
CVE-2020-3794
CVE-2020-3794 affects Adobe ColdFusion 2016 and 2018. The issue is a file inclusion vulnerability that could allow an attacker to execute arbitrary code by loading files located in the webroot or its subdirectories. Public advisories and vendor listings (NVD, Red Hat, CNVD, CVE records, and APSB2...
Adobe ColdFusion 2016.x < 2016u14 / 2018.x < 2018u8 Multiple Vulnerabilities (APSB20-16)
The version of Adobe ColdFusion installed on the remote Windows host is prior to 2016.x update 14 or 2018.x update 8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-16 advisory. - Remote file read potentially leading to Arbitrary file read from the Coldfusion...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : MoinMoin vulnerability (USN-3794-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3794-1 advisory. It was discovered that MoinMoin incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive...
MySQL Unspecified vulnerabilities-03 (Jul 2013) - Linux
MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql"; ifdescripti...
CVE-2014-3794
CVE-2014-3794 is rejected and not an active vulnerability entry.
Debian DSA-3794-1 : munin - security update
Stevie Trujillo discovered a local file write vulnerability in munin, a network-wide graphing framework, when CGI graphs are enabled. GET parameters are not properly handled, allowing to inject options into munin-cgi-graph and overwriting any file accessible by the user running the cgi-process...
Debian Security Advisory DSA 3794-1 (munin - security update)
Stevie Trujillo discovered a local file write vulnerability in munin, a network-wide graphing framework, when CGI graphs are enabled. GET parameters are not properly handled, allowing to inject options into munin-cgi-graph and overwriting any file accessible by the user running the cgi-process...
CVE-2017-3794
CVE-2017-3794 – Cisco WebEx Meetings Server CSRF vulnerability : An unauthenticated, remote attacker could exploit CSRF to perform actions in the Admin interface of Cisco WebEx Meetings Server. Affected release information indicates vulnerable 2.6 with a fix in 2.7.1.12. The issue stems from insu...
CVE-2015-3794
The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Unicode string...
CVE-2015-3794
CVE-2015-3794 affects Apple OS X Speech UI prior to 10.10.5 when speech alerts are enabled. A crafted Unicode string can cause memory corruption, leading to remote code execution or a denial of service. Root cause: improper handling of Unicode in Speech UI. Affected: OS X Yosemite before 10.10.5....
CVE-2013-3794
CVE-2013-3794: Unspecified vulnerability in the MySQL Server component (Oracle MySQL 5.5.30 and earlier, 5.6.10) allowing remote authenticated users to affect availability; underlying vectors are unknown. The connected documents do not provide concrete technical details (no explicit root cause, a...
RHEL 3 / 4 : flash-plugin (RHSA-2009:1658)
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 Extras and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox...