CVE-2022-4295

creationtimestamp| type| source ---|---|--- 2023-01-16 18:24:17+00:00| seen| https://t.me/cibsecurity/56544...

CVE-2022-4295

The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin...

CVE-2022-4295

The CVE-2022-4295 affects the Show All Comments WordPress plugin (pre-7.0.1). The issue is a Reflected XSS caused by not sanitising/escaping a parameter before it is echoed in the page, potentially affecting logged-in high-privilege users such as admins. The vulnerability is exploitable via craft...

CVE-2022-4295 Show All Comments < 7.0.1 - Reflected XSS

The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin...

CVE-2021-4295

creationtimestamp| type| source ---|---|--- 2022-12-29 12:13:01+00:00| seen| https://t.me/cibsecurity/55522...

CVE-2021-4295

ONC code-validator-api (versions up to 1.0.30) contains an XML External Entity (XXE) issue in vocabularyValidationConfigurations of CodeValidatorApiConfiguration.java. The vulnerability allows external entity reference manipulation and is addressed by upgrading to version 1.0.31. The linked patch...

CVE-2021-4295 ONC code-validator-api XML CodeValidatorApiConfiguration.java vocabularyValidationConfigurations xml external entity reference

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

CVE-2020-4295

CVE-2020-4295 affects IBM DOORS Next Generation (RDNG) / DOORS Next: versions 6.0.2, 6.0.6, 6.0.6.1, and 7.0 are vulnerable to cross-site scripting in the Web UI, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. The root cause is a ...

Ubuntu 16.04 LTS / 18.04 LTS : Rake vulnerability (USN-4295-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4295-1 advisory. It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands. Tenable has...

Ubuntu: Security Advisory (USN-4295-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-4295

IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker with specialized access to obtain highly sensitive from the credential vault. IBM X-Force ID: 160758...

CVE-2019-4295

CVE-2019-4295 affects IBM Robotic Process Automation with Automation Anywhere version 11.0. The issue allows an attacker with specialized access to obtain highly sensitive information from the Credential Vault, representing a high-confidentiality disclosure (CVSSv3 base score 4.9). The IBM bullet...

Security Bulletin: IBM Robotic Process Automation Credential Vault might leak secrets on the Client (CVE-2019-4295)

Summary IBM Robotic Process Automation Credential Vault might leak secrets on the Client Vulnerability Details CVEID: CVE-2019-4295 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere could allow an attacker with specialized access to obtain highly sensitive from the credential...

CVE-2018-4295

An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14...

CVE-2018-4295

An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14...

CVE-2018-4295

CVE-2018-4295 is an input validation vulnerability affecting macOS Mojave 10.14 and earlier. The issue is described as an input validation problem in the initial record and is corroborated by Apple advisories HT209139/HT209193, which list CVE-2018-4295 under macOS Mojave security updates and note...

CVE-2018-4295

An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14...

About the security content of macOS Mojave 10.14

About the security content of macOS Mojave 10.14 This document describes the security content of macOS Mojave 10.14. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

CVE-2017-4295

CVE-2017-4295 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4295

Concrete details from connected reports show CVE-2016-4295 affects Hancom Hangul Hangul HCell components (HCell.exe, HCellApp.dll, HCellBook.dll, 9.1.0.2176) in Hancom Office 2014 VP. The root cause is a bounds-checking flaw in CFormulaTokenSizeModifier during chart/formula processing of Workbook...