77 matches found
CVE-2023-4023 All Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDOR
The All Users Messenger WordPress plugin through 1.24 does not prevent non-administrator users from deleting messages from the all-users messenger...
WordPress All Users Messenger Plugin <= 1.24 is vulnerable to Broken Access Control
Software All Users Messenger Type Plugin Vulnerable versions = 1.24 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-4023 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID db4d05aa5b71 Credits Dmitrii Ignatyev Required...
CVE-2022-4023
The 3DPrint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowing an attacker to craft a malicious request that will create an archive of any files or directories on the target server by tricking a...
CVE-2022-4023
The CVE-2022-4023 issue affects the 3DPrint WordPress plugin prior to version 3.5.6.9. A CSRF vulnerability in the modified Tiny File Manager component allows an authenticated admin to trigger creation of an archive containing arbitrary files and directories. The archive is created at a predictab...
RHEL 7 : kpatch-patch (RHSA-2023:4023)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4023 advisory. The kpatch management tool provides a kernel patching infrastructure which allows you to patch a running kernel without rebooting or restarting any...
CVE-2021-4023 affecting package kernel 5.10.109.1-2
CVE-2021-4023 affecting package kernel 5.10.109.1-2. A patched version of the package is available...
CVE-2021-4023
A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...
CVE-2021-4023
CVE-2021-4023 affects the Linux kernel io-workqueue, with pre-5.15-rc1 kernels able to panic if an improper cancellation triggers new io-uring submissions during memory shortage. The flaw enables a local user with io-uring permissions to crash the system. Connected sources indicate patches/versio...
CVE-2021-4023
A flaw was found in the io-workqueue implementation in the Linux kernel. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to execute io-uring requests to...
SUSE: Security Advisory (SUSE-SU-2018:4023-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4023
Atlassian Fisheye and Crucible are affected by CVE-2020-4023: the review coverage resource allows a cross-site scripting (XSS) via the committerFilter parameter in versions before 4.8.2. The vulnerability impacts the ability to inject arbitrary HTML/JavaScript. Affected versions:
XSS in the review coverage resource through the committerFilter parameter- CVE-2020-4023
The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting XSS vulnerability through the committerFilter parameter. Affected versions: version 4.8.2 Fixed versions: 4.8.2 4.9.0...
XSS in the review coverage resource through the committerFilter parameter- CVE-2020-4023
The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting XSS vulnerability through the committerFilter parameter. Affected versions: version 4.8.2 Fixed versions: 4.8.2 4.9.0...
XSS in the review coverage resource through the committerFilter parameter- CVE-2020-4023
The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting XSS vulnerability through the committerFilter parameter. Affected versions: version 4.8.2 Fixed versions: 4.8.2 4.9.0...
RHEL 6 : samba (RHSA-2019:4023)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4023 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...
Ubuntu: Security Advisory (USN-4023-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS : Mosquitto vulnerabilities (USN-4023-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4023-1 advisory. It was discovered that Mosquitto broker incorrectly handled certain specially crafted input and network packets. A remote attacker could use...
CVE-2018-4023
The CVE-2018-4023 issue affects the NT9665X chipset firmware used in the Anker Roav A1 Dashcam (RoavA1_SW_V1.9). The vulnerability is in the XML_UploadFile Wi‑Fi command (command 5001) where the fixup_path routine copies user-supplied URL paths into a fixed-size stack buffer without bounds checki...
