CVE-2022-4267

The Bulk Delete Users by Email WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2022-4267 Bulk Delete Users by Email <= 1.2 - Reflected Cross-Site Scripting

The Bulk Delete Users by Email WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2022-4267

CVE-2022-4267 concerns the WordPress plugin Bulk Delete Users by Email (versions up to 1.2 as stated in the primary description). The vulnerability is a reflected cross-site scripting (XSS) caused by lack of proper sanitisation/escaping of a parameter that is output back into the page. Several co...

CVE-2021-4267

A vulnerability classified as problematic was found in taddiscuss. Affected by this vulnerability is an unknown functionality. The manipulation of the argument DiscussTitle leads to cross site scripting. The attack can be launched remotely. The name of the patch is...

CVE-2021-4267 tad_discuss cross site scripting

A vulnerability classified as problematic was found in taddiscuss. Affected by this vulnerability is an unknown functionality. The manipulation of the argument DiscussTitle leads to cross site scripting. The attack can be launched remotely. The name of the patch is...

CVE-2021-4267

CVE-2021-4267 concerns the tad_discuss component. The issue arises from manipulation of the DiscussTitle parameter, triggering a cross-site scripting (XSS) vulnerability. It can be exploited remotely (attack surface is network-exposed) and requires user interaction. A patch is available, identifi...

SUSE: Security Advisory (SUSE-SU-2018:2752-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM MQ could allow an authenticated user to cause a denial of service due to a memory leak. (CVE-2020-4267)

Summary A memory leak was found within the LDAP Authentication code which could be exploited to cause a denial of service attack. Vulnerability Details CVEID: CVE-2020-4267 DESCRIPTION: IBM MQ and MQ Appliance could allow an authenticated user to cause a denial of service due to a memory leak. CV...

CVE-2020-4267

CVE-2020-4267 affects IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD. An authenticated user could cause a denial of service via a memory leak in the LDAP authentication path. Affected versions include IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD. Remediation is available: apply IBM fixes FP...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2020-4267)

Summary IBM MQ Appliance has addressed the following denial of service vulnerability. Vulnerability Details CVEID: CVE-2020-4267 DESCRIPTION: IBM MQ and MQ Appliance could allow an authenticated user to cause a denial of service due to a memory leak. CVSS Base score: 5.3 CVSS Temporal Score: See:...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4267. Reason: This issue was MERGED into CVE-2013-4267 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should reference CVE-2013-4267...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4267. Reason: This issue was MERGED into CVE-2013-4267 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should reference CVE-2013-4267...

CVE-2013-4268

CVE-2013-4267 affects Ajaxeplorer prior to 5.0.1. It enables remote command execution through shell metacharacters in multiple parameters: (1) archive_name to the Power FS module, (2) file name to getTrustSizeOnFileSystem in the File System (Standard) module, and (3) revision in the Subversion Re...

CVE-2013-4267

Ajaxeplorer prior to 5.0.1 is affected by CVE-2013-4267, enabling remote command execution via shell metacharacters in three parameters: (1) archive_name for the Power FS module, (2) a file name to getTrustSizeOnFileSystem in the File System (Standard) module, and (3) revision in the Subversion R...

Ubuntu 16.04 LTS : ARM mbed TLS vulnerabilities (USN-4267-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4267-1 advisory. It was discovered that mbedtls has a bounds-check bypass through an integer overflow that can be used by an attacked to execute arbitrary code or cause a...

Security Bulletin: Buffer overflow vulnerability in IBM Spectrum Protect Backup-Archive Client (CVE-2019-4267)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client is vulnerable to a buffer overflow that could allow execution of arbitrary code on the local system or the application to crash. Vulnerability Details CVEID: CVE-2019-4267 DESCRIPTION: The IBM Spectrum Protect...

CVE-2019-4267

CVE-2019-4267 affects IBM Spectrum Protect (Backup-Archive Client) versions 7.1.0.0–7.1.8.5 and 8.1.0.0–8.1.7.1, where a buffer overflow could allow arbitrary code execution or crash the application. The IBM Security Bulletin lists this as a vulnerability in the Backup-Archive Client with a CVSSv...

CVE-2018-4267

CVE-2018-4267 refers to multiple memory corruption issues in Apple WebKit affecting Apple platforms (iOS before 11.4.1, tvOS before 11.4.1, Safari before 11.1.2, iTunes for Windows, iCloud for Windows). The available documents confirm a memory handling/root-cause issue but do not supply concrete ...

CVE-2018-4267

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-705)

This update for webkit2gtk3 to version 2.20.5 fixes the following issues : Security issue fixed : - CVE-2018-12911: Fix off-by-one in xdgmimegetsimpleglobs bsc1101999. - CVE-2018-4261, CVE-2018-4262, CVE-2018-4263, CVE-2018-4264, CVE-2018-4265, CVE-2018-4267, CVE-2018-4272, CVE-2018-4284:...