99 matches found
CVE-2022-4260
CVE-2022-4260 affects the WordPress WP-Ban plugin prior to 1.69.1. Affected component: plugin settings handling, where input is not fully sanitized/escaped. Root cause: stored XSS could be triggered by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (e.g., multisite)....
MariaDB 10.0.0 < 10.0.12 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.12 advisory. - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote...
SUSE: Security Advisory (SUSE-SU-2014:1072-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-11644
The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...
Security Bulletin: CVE-2020-4260 Secure properties can be revealed using a generic process
Summary IBM UrbanCode Deploy UCD could allow a user with special permissions to obtain sensitive information via generic processes. Vulnerability Details CVEID: CVE-2020-4260 DESCRIPTION: IBM UrbanCode Deploy UCD could allow a user with special permissions to obtain sensitive information via...
Security Bulletin: CVE-2020-4260 SOME SECURE PROPERTIES CAN BE REVEALED VIA GENERIC PROCESSES
Summary CVE-2020-4260 SECURE PROPERTIES CAN BE REVEALED VIA GENERIC PROCESSES. Some secure properties can be revealed through a specially configured generic processes. Vulnerability Details CVEID: CVE-2020-4260 DESCRIPTION: IBM UrbanCode Deploy UCD 7.0.5 could allow a user with special permission...
CVE-2020-4260
IBM UrbanCode Deploy UCD 7.0.5 could allow a user with special permissions to obtain sensitive information via generic processes. IBM X-Force ID: 175639...
CVE-2020-4260
IBM UrbanCode Deploy (UCD) 7.0.5 could allow a user with special permissions to obtain sensitive information via generic processes. Affected versions include UCD 6.2.7.3–4, 7.0.3–7.0.4.x, and all versions; the issue is described as secure properties being revealed through specially configured gen...
CVE-2019-4260
IBM Daeja ViewONE Virtual 5.0–5.0.5 has an information disclosure vulnerability (CVE-2019-4260) that could let an unauthenticated user download server files. Impacted product: Daeja ViewONE Professional/Standard/Virtual 5.0–5.0.5. Root cause: improper handling allowing unauthorized file access. R...
CVE-2018-4260
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...
CVE-2018-4260
CVE-2018-4260 refers to an Apple WebKit/WebKit Page Loading component vulnerability affecting iOS Safari prior to 11.4.1 and Safari 11.1.2, described as an inconsistent user interface issue mitigated by improved state management. Public references in NVD and Red Hat/Apple security notes associate...
Debian: Security Advisory (DSA-4260-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
macOS : Apple Safari < 11.1.2 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1.2. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid111109;...
CVE-2017-4260
CVE-2017-4260 is rejected/not used; this ID does not represent an active vulnerability entry.
Memory corruption
Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262...
Memory corruption
Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262...
CVE-2016-4260
Adobe Digital Editions before 4.5.2 is affected by multiple vulnerabilities allowing attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This CVE (CVE-2016-4260) is described as a different vulnerability from CVE-2016-4256, CVE-2016-4257, ...
Adobe Digital Editions < 4.5.2 Multiple Vulnerabilities (APSB16-28)
The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.2. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-4256, CVE-2016-4257,...
SUSE: Security Advisory for MySQL (SUSE-SU-2014:1072-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...