100 matches found
CVE-2022-4373
CVE-2022-4373 affects the Quote-O-Matic WordPress plugin (versions up to 1.0.5). The issue is a SQL injection caused by improper sanitization/escaping of a parameter used in a SQL statement, exploitable by high-privilege users such as admins. Public disclosures and PoCs indicate an Admin+ SQLi ve...
Oracle Linux 8 : pcre (ELSA-2021-4373)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4373 advisory. - Fix CVE-2019-20838 a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier bug 1852252 Tenable has...
Ubuntu: Security Advisory (USN-4373-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Thunderbird vulnerabilities (USN-4373-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4373-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a...
CVE-2018-4373
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...
CVE-2018-4373
CVE-2018-4373 relates to multiple memory corruption issues addressed by Apple with improved memory handling. The vulnerability affected iOS prior to 12.1, watchOS prior to 5.1, Safari prior to 12.0.1, iTunes prior to 12.9.1, and iCloud for Windows prior to 7.8. Apple notes patches in iOS 12.1, wa...
Debian DSA-4373-1 : coturn - security update
Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. - CVE-2018-4056 A SQL injection vulnerability was discovered in the coTURN administrator web portal. As the administration web interface is shared with the production, it is unfortunately not possible to easily...
openSUSE Security Update : webkit2gtk3 (openSUSE-2019-68)
This update for webkit2gtk3 to version 2.22.4 fixes the following issues : Security issues fixed : CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,...
SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0059-1)
This update for webkit2gtk3 to version 2.22.4 fixes the following issues : Security issues fixed : CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,...
Apple iTunes < 12.9.1 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Apple iTunes < 12.9.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
CVE-2016-4373
The CVE-2016-4373 entry concerns the AdminUI of HP Operations Manager (OM) before 9.21.130 on Linux/Unix/Solaris. It allows remote attackers to execute arbitrary commands by sending a crafted serialized Java object related to the Apache Commons Collections (ACC) library, i.e., remote code executi...
huffingtonpost.ca Open Redirect vulnerability
Vulnerable URL: http://www.huffingtonpost.ca/slideshows/helpers/twittercard.php?slideshow=1337=1337url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 29.04.2016 Latest check for patch:| 29.04.2016 19:55 GMT Vulnerability type:| Open Redirect Vulnerability...
CVE-2015-4373
Summary: CVE-2015-4373 is a cross-site scripting (XSS) vulnerability in the OG Tabs contributed module for Drupal 7.x, affecting versions prior to 7.x-1.1. Affected component: OG Tabs module (Drupal 7.x). Root cause / vulnerability detail: Module does not sufficiently sanitize user-supplied text ...
SA-CONTRIB-2015-077 - OG tabs - Cross Site Scripting (XSS)
OG Tabs modules provides a secondary menu with links to nodes of the same OG group. The module doesn't sufficiently sanitize user supplied text in some pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have permission t...
CVE-2014-4373
CVE-2014-4373: In Apple’s IOAcceleratorFamily, the IntelAccelerator driver on iOS (before v8) and Apple TV (before v7) contains a NULL pointer dereference that can be triggered by a crafted app, leading to a denial of service (and device restart). Apple’s remediation is to improve error handling ...
CVE-2013-4373
Red Hat JBoss Operations Network 3.1.2 is affected by CVE-2013-4373. The vulnerability is in JPADriftServerBean.storeFiles, which creates a predictable temporary directory when unpacking a zip file, allowing a local attacker to place their own drift files into the server. Impact is local, enablin...
Important: Red Hat Security Advisory: Red Hat JBoss Operations Network 3.1.2 update
An update for Red Hat JBoss Operations Network 3.1.2 that fixes multiple security issues is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which...
