128 matches found
CVE-2026-4127
The Speedup Optimization plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.5.9. The speedup01ajaxenabled function, which handles the wpajaxspeedup01enabled AJAX action, does not perform any capability check via currentusercan and also lacks nonce...
CVE-2023-4127
Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...
CVE-2025-4127
The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Price Range’ parameter in all versions up to, and including, 2.7.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-4127 WP SEO Structured Data Schema <= 2.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings
The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Price Range’ parameter in all versions up to, and including, 2.7.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-4127 WP SEO Structured Data Schema <= 2.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings
The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Price Range’ parameter in all versions up to, and including, 2.7.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress WP SEO Structured Data Schema plugin <= 2.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Plugin Settings vulnerability discovered by Jorgson in WordPress Plugin WP SEO Structured Data Schema versions = 2.7.11...
Debian: Security Advisory (DLA-4127-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-4127-1 subversion - security update
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2011-4127
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write...
CVE-2024-4127
CVE-2024-4127 affects the Tenda W15E firmware 15.11.0.14. The vulnerability lies in the function guestWifiRuleRefresh , where manipulation of the argument qosGuestDownstream causes a stack-based buffer overflow. This condition can be exploited remotely, per the CVE description and multiple connec...
SUSE: Security Advisory (SUSE-SU-2023:4127-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-4127
The CVE-2023-4127 entry concerns a race condition in a thread within the GitHub project answerdev/answer, affecting versions prior to 1.1.1. Affected component is the threaded execution in the Answer repository; root cause is not explicitly detailed beyond the race condition. Practical impact is ...
CVE-2023-4127 Race Condition within a Thread in answerdev/answer
Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...
CBL Mariner 2.0 Security Update: kernel (CVE-2022-4127)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4127 advisory. - A NULL pointer dereference issue was discovered in the Linux kernel in iofilesupdatewithindexalloc. A local...
Amazon Linux 2 : thunderbird (ALAS-2023-1951)
The version of thunderbird installed on the remote host is prior to 102.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1951 advisory. 2025-01-30: CVE-2022-31744 was added to this advisory. 2025-01-30: CVE-2022-3155 was added to this advisory...
CVE-2022-4127 affecting package kernel 5.10.155.1-1
CVE-2022-4127 affecting package kernel 5.10.155.1-1. A patched version of the package is available...
CVE-2021-4127
creationtimestamp| type| source ---|---|--- 2022-12-22 22:23:46+00:00| seen| https://t.me/cibsecurity/55151...
CVE-2021-4127
An out of date graphics library Angle likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird 78.9 and Firefox ESR 78.9...