Rocky Linux 8 : file (RLSA-2021:4374)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4374 advisory. - cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: tekton-chains, pulumi, flux-helm-controller, grpcurl, yq, hugo, nats, up, dynamic-localpv-provisioner, kind, crossplane-provider-aws, kots, kubernetes-dashboard-metrics-scraper, kube-state-metrics, trillian, gomplate, kubernetes-csi-livenessprobe, runc, k8sgpt,...

CVE-2023-4374

creationtimestamp| type| source ---|---|--- 2023-08-29 22:17:48+00:00| seen| https://t.me/cibsecurity/68619...

CVE-2023-4374

The WP Remote Users Sync plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability check on the 'refreshlogsasync' functions in versions up to, and including, 1.2.11. This makes it possible for authenticated attackers with subscriber...

CVE-2023-4374 WP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View

The WP Remote Users Sync plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability check on the 'refreshlogsasync' functions in versions up to, and including, 1.2.11. This makes it possible for authenticated attackers with subscriber...

CVE-2023-4374

CVE-2023-4374 – WP Remote Users Sync (WordPress) vulnerability affecting versions up to 1.2.11 due to a missing capability check in the refresh_logs_async function. This permits authenticated users with subscriber privileges or higher to view logs and potentially add data. Impact is information d...

CVE-2021-4374

The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the processform.php file. This makes it possible for unauthenticated attackers to arbitrarily update the...

CVE-2021-4374 WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update

The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the processform.php file. This makes it possible for unauthenticated attackers to arbitrarily update the...

CVE-2021-4374

CVE-2021-4374 affects WordPress Automatic Plugin versions up to 3.53.2. The root cause is missing authorization and option validation in process_form.php, allowing unauthenticated users to update arbitrary WordPress options (via update_option()) and potentially compromise the site. The nuclei tem...

CVE-2022-4374

creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:21+00:00| seen| https://t.me/cibsecurity/56205...

CVE-2022-4374

The Bg Bible References WordPress plugin through 3.8.14 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2022-4374

CVE-2022-4374 affects the Bg Bible References WordPress plugin (versions 3.8.14 and earlier). The vulnerability is a Reflected Cross-Site Scripting caused by improper sanitization/escaping of a parameter before it is echoed back to the page. Impact is reflected XSS (no server-side impact describe...

CVE-2022-4374 Bg Bible References <= 3.8.14 - Reflected XSS

The Bg Bible References WordPress plugin through 3.8.14 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2022-4374 Bg Bible References <= 3.8.14 - Reflected XSS

The Bg Bible References WordPress plugin through 3.8.14 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CentOS 8 : file (CESA-2021:4374)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4374 advisory. - file: heap-based buffer overflow in cdfreadpropertyinfo in cdf.c CVE-2019-18218 Note that Nessus has not tested for this issue but has instead relied only on...

VulnCheck KEV: CVE-2021-4374

The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the processform.php file. This makes it possible for unauthenticated attackers to arbitrarily update the...

CVE-2013-4374

CVE-2013-4374 describes an insecure temporary file storage vulnerability in the RHQ MongoDB Drift Server up to 2013-09-25, triggered when unpacking zipped files. The flaw causes unpacked files to land in a world-writable directory, which could permit local attackers to modify/tamper with files an...

CVE-2018-4374

CVE-2018-4374 is a logic issue in Safari Reader (WebKit) that was addressed by improved input/URL validation. Affected products include iOS prior to 12.1, watchOS prior to 5.1, Safari prior to 12.0.1, iTunes prior to 12.9.1, and iCloud for Windows prior to 7.8. Apple’s security notes for iOS 12.1...

About the security content of iCloud for Windows 7.8 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Debian DSA-4374-1 : qtbase-opensource-src - security update

Several issues were discovered in qtbase-opensource-src, a cross-platform C++ application framework, which could lead to denial-of-service via application crash. Additionally, this update fixes a problem affecting vlc, where it would start without a GUI. C Tenable Network Security, Inc. The...