112 matches found
Oracle Linux 8 : bind (ELSA-2023-4102)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4102 advisory. 32:9.11.36-8.1 - Improve RBT overmem cache cleaning CVE-2023-2828 Tenable has extracted the preceding description block directly from the Oracle Linux security...
WordPress The Royal Elementor Addons Plugin < 1.3.56 Multiple Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:royal-elementor-addons:royalelementoraddons"; if description...
CVE-2022-4102
creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:20+00:00| seen| https://t.me/cibsecurity/56203...
CVE-2022-4102 Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Deletion
The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template. This could allow any authenticated users, such as subscribers, to delete arbitrary posts assuming they know...
CVE-2022-4102
The CVE-2022-4102 entry concerns the Royal Elementor Addons WordPress plugin (pre-1.3.56). The vulnerability arises from missing authorization and CSRF checks when deleting a template, and it does not verify that the target post is actually a template. This can allow any authenticated user (e.g.,...
CVE-2022-4102 Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Deletion
The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template. This could allow any authenticated users, such as subscribers, to delete arbitrary posts assuming they know...
CVE-2022-43096
Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...
CVE-2022-43096
Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...
Code injection
Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...
Mediatrix 4102 安全漏洞
The Mediatrix 4102 is a VoIP adapter from Mediatrix. A security vulnerability exists in versions prior to Mediatrix 4102 v48.5.2718, which stems from a vulnerability that allows a local attacker to gain root access via the UART port...
CVE-2022-43096
Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...
CVE-2022-43096
CVE-2022-43096 concerns the Mediatrix 4102 VoIP adapter. According to the documents, versions prior to 48.5.2718 are vulnerable to a local attack that can grant root access via the UART port. The baseline CVSS–3.1 metrics indicate a physical attack vector, with low exploit complexity, no privileg...
CVE-2022-43096
Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...
PT-2022-26749 · Media5 · Mediatrix 4102
Name of the Vulnerable Software and Affected Versions: Mediatrix 4102 versions prior to 48.5.2718 Description: The issue allows local attackers to gain root access via the UART port. Recommendations: For versions prior to 48.5.2718, update to version 48.5.2718 or later to resolve the issue...
CVE-2015-4102
CVE-2015-4102 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-4102
...
CVE-2021-4102
Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2021-4102
Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4102
Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4102
Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...