CVE-2022-4307 Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS

The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin...

CVE-2022-4307

CVE-2022-4307 affects the Pardakht Delkhah WordPress plugin prior to 2.9.3. The plugin fails to sanitise/escape several parameters, enabling unauthenticated attackers to craft requests containing XSS payloads that are triggered when a high-privilege user (e.g., admin) visits a plugin page. Report...

CVE-2021-4307

creationtimestamp| type| source ---|---|--- 2023-01-07 22:26:17+00:00| seen| https://t.me/cibsecurity/56127...

@egeria/egeria (>=0.20.1 <=0.23.10), appstate (>=0.0.1 <=0.0.2) +8 more potentially affected by CVE-2021-4307 via baobab (>=0.2.2 <=2.5.2)

baobab NPM version =0.2.2, =0.20.1, =0.0.1, =0.7.0, =0.0.1, =0.0.58, =0.20.0, =0.0.8, =2.1.2, =2.6.0 Source cves: CVE-2021-4307 Source advisory: OSV:GHSA-WVR2-Q86M-6WHP...

CVE-2021-4307

CVE-2021-4307 affects the Baobab data tree (Yomguithereal Baobab) up to version 2.6.0. The issue is a prototype pollution vulnerability: an attacker can manipulate object prototype attributes via a vulnerable function (merger), enabling remote impact on object prototypes. Affected functionality i...

RHEL 7 : java-11-openjdk (RHSA-2020:4307)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4307 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

CVE-2020-4307

CVE-2020-4307 affects IBM Security Guardium 11.1. The IBM bulletin documents an Improper Access Control vulnerability allowing an attacker on the same network to gain access to the Solr dashboard and cause a denial of service. CVSS base score 6.5 (Medium) with high impact on availability. A remed...

Ubuntu 18.04 LTS : Apache HTTP Server update (USN-4307-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4307-1 advisory. As a security improvement, this update adds TLSv1.3 support to the Apache HTTP Server package in Ubuntu 18.04 LTS. TLSv1.3 is enabled by default, and in certain...

CVE-2019-4307

IBM Security Guardium Big Data Intelligence SonarG 4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 160987...

CVE-2018-4307

CVE-2018-4307 describes a logic issue in Safari/Apple’s WebKit stack affecting iOS prior to 12 and Safari 12. The root cause is described as a state-management flaw; impact is characterized as a modest security risk (CVSS ~4.3) with network attack potential and user interaction required per the m...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4307)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4307 advisory. - ntty: fix EXTPROC vs ICANON interaction with TIOCINQ aka FIONREAD Linus Torvalds Orabug: 28855335 CVE-2018-18386 - ALSA: seq: Fix regression by...

CVE-2017-4307

...

CVE-2016-4307

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user-mode to...

CVE-2016-4307

CVE-2016-4307 affects the Kaspersky Internet Security KL1 driver (KLBG) IOCTL handling. The vulnerability arises in a loop that computes the input string length by scanning for a NULL terminator; if the input lacks a NULL within the supplied buffer, the loop reads memory beyond the buffer bounds,...

KLA10946 Denial of service vulnerability in Kaspersky products

Vulnerability was found in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver in Kaspersky products. By exploiting this vulnerability malicious users can cause an access violation and a denial of service as a result. This vulnerability can be exploited locally via a specia...

Oracle: Security Advisory (ELSA-2010-0178)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability (cisco-sa-20150916-pcp)

According to its self-reported version number, the Cisco Prime Collaboration Provisioning device is a version prior to 11.0.0.650. It is, therefore, affected by a security bypass vulnerability in the web framework due to improper implementation of authorization and access controls. An...

Gentoo Security Advisory GLSA 201310-21

Gentoo Linux Local Security Checks GLSA 201310-21 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-4307

CVE-2015-4307 affects Cisco Prime Collaboration Provisioning Web Framework prior to 11.0. An authenticated, remote attacker can bypass access controls via a crafted URL and create administrative accounts (Bug CSCut64111). The issue enables access to higher-privileged functions that should be rest...

CVE-2014-4307

Summary: CVE-2014-4307 is a SQL injection vulnerability in WebTitan’s categories-x.php, exploitable via the sortkey parameter to execute arbitrary SQL on affected installations. The issue is described as affecting WebTitan versions prior to 4.04. Multiple connected sources corroborate this vulner...