60 matches found
CVE-2022-3830 WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site
The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-3830 WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site
The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-3830
The CVE-2022-3830 issue affects WP Page Builder
CVE-2021-3830
creationtimestamp| type| source ---|---|--- 2021-09-26 12:32:56+00:00| seen| https://t.me/cibsecurity/29426...
CVE-2021-3830
CVE-2021-3830 affects btcpayserver, with an XSS vulnerability caused by Improper Neutralization of Input During Web Page Generation. The CVE listing notes it as a Stored XSS in btcpayserver/btcpayserver; other connected records describe the general vulnerability but do not provide concrete fixes ...
CVE-2021-3830 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2020-3830
CVE-2020-3830 is a local validation issue in the handling of symlinks in macOS Catalina’s PackageKit component. A malicious application may overwrite arbitrary files due to insufficient symlink validation. Apple patched this in macOS Catalina 10.15.3 (security update). The connected Red Hat/NVD e...
CVE-2019-3830
CVE-2019-3830 affects OpenStack Ceilometer (ceilometer-agent) where the agent prints sensitive configuration data to log files, exposing confidentiality. The issue is in ceilometer prior to version 12.0.0.0rc1. Red Hat and OSV/Red Hat advisories confirm the vulnerability and reference the fix: up...
Low: Red Hat Security Advisory: openstack-ceilometer security and bug fix update
An update for openstack-ceilometer is now available for Red Hat OpenStack Platform 14.0 Rocky. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Photon OS 1.0: Kibana PHSA-2019-1.0-0205
An update of the kibana package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0205. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12290...
Low: Red Hat Security Advisory: openstack-ceilometer security and bug fix update
An update for openstack-ceilometer is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Ubuntu: Security Advisory (USN-3830-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS : OpenJDK regression (USN-3830-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3830-1 advisory. USN-3804-1 fixed vulnerabilities in OpenJDK. Unfortunately, that update introduced a regression when validating JAR files that prevented Java...
Elastic Kibana 'CVE-2018-3830' Cross-Site Scripting (XSS) Vulnerability - Windows
Kibana is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Elastic Kibana 'CVE-2018-3830' Cross-Site Scripting (XSS) Vulnerability - Linux
Kibana is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2018-3830
Kibana CVE-2018-3830 is a cross-site scripting (XSS) vulnerability in the source field formatter affecting Kibana versions 5.3.0 through 6.4.1. The issue allows an attacker to obtain sensitive information from or perform actions on behalf of other Kibana users. Remediation provided by the linked ...
CVE-2015-3830
The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by displaying a malicious page for legitimate domain names...
CVE-2015-3830
Technical details for CVE-2015-3830 are not publicly available in the provided connected documents; monitor for updates.
Debian: Security Advisory (DSA-3830-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-3830
Cisco Meeting Server (CMS) exposes an internal API vulnerability that allows an unauthenticated, remote attacker to cause a denial of service (DoS) on the affected appliance. Affected release: 2.1; fixed release: 2.1.2. The Cisco advisory notes the issue arises from invalid data received on a spe...