81 matches found
CVE-2022-4107 SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Download
The SMSA Shipping for WooCommerce WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks, as well as does not validate the file to be downloaded, allowing any authenticated users, such as subscriber to download arbitrary file from the server...
CVE-2020-4107
creationtimestamp| type| source ---|---|--- 2022-05-20 02:29:57+00:00| seen| https://t.me/cibsecurity/43014...
CVE-2020-4107
CVE-2020-4107 concerns HCL Domino, where an Insufficient Access Control vulnerability allows an authenticated, locally-privileged attacker to escalate privileges, potentially causing denial of service or information disclosure. The available sources confirm the affected product and the local atta...
CVE-2021-4107
yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4107
yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4107 Cross-site Scripting (XSS) - Reflected in yetiforcecompany/yetiforcecrm
yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4107
CVE-2021-4107 is described across multiple sources as a cross-site scripting (XSS) vulnerability in yetiforcecrm, caused by Improper Neutralization of Input During Web Page Generation. Affected product: YetiforceCRM; vulnerability type: reflected/unspecified-input XSS affecting web page generatio...
RHEL 7 : firefox (RHSA-2019:4107)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:4107 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
CVE-2013-4107
CVE-2013-4107 concerns Cryptocat prior to 2.0.22, where the vulnerability lies in cryptocat.js: the function handlePresence() enables a cross-site scripting (XSS) condition. The impact is client-side code execution under attacker-controlled input, reported consistently across multiple sources. Th...
Ubuntu 16.04 LTS / 18.04 LTS : GIFLIB vulnerabilities (USN-4107-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4107-1 advisory. It was discovered that GIFLIB incorrectly handled certain GIF files. An attacker could possibly use this issue to cause a denial of service...
CVE-2018-4107
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document...
CVE-2018-4107
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document...
CVE-2018-4107
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document...
CVE-2018-4107
CVE-2018-4107 affects macOS before 10.13.4, specifically the PDFKit component. The issue allows a PDF to bypass restrictions on visiting URLs contained in the document, enabling a remote attacker to direct a user to a malicious website via crafted PDF content. The vulnerability stems from parsing...
CVE-2017-4107
The CVE-2017-4107 entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-1075
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...
CVE-2016-1065
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...