94 matches found
CVE-2021-4369
The CVE-2021-4369 entry concerns the WordPress Frontend File Manager plugin. Concrete details in connected sources show that versions up to and including 18.2 are affected by Unauthenticated Content Injection due to missing authorization protections, missing checks for editing others’ posts, and ...
CVE-2022-4369
The WP-Lister Lite for Amazon WordPress plugin before 2.4.4 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high-privilege users such as admin...
CVE-2022-4369
The CVE-2022-4369 entry concerns the WP-Lister Lite for Amazon WordPress plugin, specifically prior to version 2.4.4. The vulnerability is a Reflected Cross-Site Scripting caused by insufficient sanitization and escaping of a parameter before it is output on the page, which can affect high-privil...
CVE-2022-4369 WP-Lister Lite for Amazon < 2.4.4 - Reflected XSS
The WP-Lister Lite for Amazon WordPress plugin before 2.4.4 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high-privilege users such as admin...
CVE-2022-4369 WP-Lister Lite for Amazon < 2.4.4 - Reflected XSS
The WP-Lister Lite for Amazon WordPress plugin before 2.4.4 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high-privilege users such as admin...
Apache CouchDB 3.2.1 - Remote Code Execution Exploit
Exploit Title: Apache CouchDB 3.2.1 - Remote Code Execution RCE Exploit Author: Konstantin Burov, @sadshade Software Link: https://couchdb.apache.org/ Version: 3.2.1 and below Tested on: Kali 2021.2 Based on 1F98D's Erlang Cookie - Remote Code Execution Shodan: port:4369 "name couchdb at" CVE:...
SUSE: Security Advisory (SUSE-SU-2013:1774-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2020-4369 · Microsoft · Windows Codecs Library
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Codecs Library affected versions not specified Description: A remote code execution issue exists in the way Microsoft Windows Codecs Library handles objects in memory. This could allow an attacker to execute arbitrary code i...
Ubuntu 18.04 LTS : Linux kernel regression (USN-4369-2)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4369-2 advisory. USN-4369-1 fixed vulnerabilities in the 5.3 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We...
Ubuntu: Security Advisory (USN-4369-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4369-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4369-1 advisory. It was discovered that the btrfs implementation in the Linux kernel did not properly detect that a block was marked dirty in some situations. An attacker...
CVE-2019-4369
CVE-2019-4369 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-4369
CVE-2018-4369 is a logic issue addressed with improved state management affecting NetworkExtension across Apple platforms. It affected iOS <12.1, macOS Mojave <10.14.1, tvOS <12.1, and watchOS
Debian DSA-4369-1 : xen - security update
Multiple vulnerabilities have been discovered in the Xen hypervisor : - CVE-2018-19961 / CVE-2018-19962 Paul Durrant discovered that incorrect TLB handling could result in denial of service, privilege escalation or information leaks. - CVE-2018-19965 Matthew Daley discovered that incorrect handli...
Apple TV < 12.1 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities as described in the HT209194 security advisory. Note that only 4th generation devices are affected by these vulnerabilities. C Tenable Network Security,...
CVE-2017-4369
CVE-2017-4369 entry is rejected/not used per initial description; it does not represent an active vulnerability entry.
CVE-2016-4369
CVE-2016-4369 affects HPE Discovery and Dependency Mapping Inventory (DDMi) versions 9.30–9.32 (including 9.32 updates). Affected component is the Apache Commons Collections (ACC) library used by DDMi. The root cause is deserialization of crafted Java objects, enabling remote authenticated users ...
Gentoo Security Advisory GLSA 201407-03
Gentoo Linux Local Security Checks GLSA 201407-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...