CVE-2021-4377 Doneren met Mollie <= 2.8.4 - Information Disclosure

The Doneren met Mollie plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.8.5 via the dmmexportdonations function which is called via the adminpostdmmexport hook due to missing capability checks. This can allow authenticated attackers to extract a CS...

CVE-2021-4377

The connected documents confirm CVE-2021-4377 affects the Doneren met Mollie WordPress plugin up to version 2.8.5. The root cause is missing capability checks in the dmm_export_donations() function, called via the admin_post_dmm_export hook, leading to potential Sensitive Data Exposure. The impac...

CVE-2022-4377

CVE-2022-4377 affects S-CMS 5.0 Build 20220328. The vulnerability is a Cross-Site Scripting (XSS) in the Contact Information Page, triggered by manipulating the Make a Call argument. Exploitation can be performed remotely and the exploit has been disclosed publicly. Several connected sources reit...

CVE-2020-4377

CVE-2020-4377 affects IBM Cognos Analytics 11.0 and 11.1, where XML data processing is vulnerable to an XML External Entity (XXE) injection. The root cause is improper handling of XML entities, enabling a remote attacker to disclose sensitive information or exhaust memory. According to IBM/NVD en...

Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities

Summary Security vulnerabilities have been addressed in IBM Cognos Analytics. Vulnerability Details CVEID: CVE-2010-5312 DESCRIPTION: jQuery UI is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ca-certificates update (USN-4377-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4377-1 advisory. The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the AddTrust External...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator (CVE-2019-4377)

Summary IBM Sterling B2B Integrator Standard Edition has addressed the information disclosure vulnerability Vulnerability Details CVEID: CVE-2019-4377 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition reveals sensitive information from a stack trace that could be used in further attacks...

CVE-2019-4377

IBM Sterling B2B Integrator vulnerability (CVE-2019-4377) affects Standard Edition 5.2.0.0 through 6.0.0.1. The issue is information disclosure via stack traces that could aid subsequent attacks. IBM’s bulletin confirms CVSS base score of 4.3 (network, low attack complexity, low privileges), and ...

CVE-2018-4377

The CVE describes a cross-site scripting (XSS) issue in Safari via malformed URLs that could affect Safari on iOS, watchOS, macOS (Safari 12.0.1) and related Apple apps (iTunes 12.9.1, iCloud for Windows 7.8). Root cause: insufficient URL validation. Impact during exploitation is an XSS condition...

[SECURITY] [DSA 4377-2] rssh regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4377-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 11, 2019 https://www.debian.org/security/faq -...

Debian DSA-4377-1 : rssh - security update

The ESnet security team discovered a vulnerability in rssh, a restricted shell that allows users to perform only scp, sftp, cvs, svnserve Subversion, rdist and/or rsync operations. Missing validation in the scp support could result in the bypass of this restriction, allowing the execution of...

Apple iTunes < 12.9.1 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Apple iTunes < 12.9.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

CVE-2017-4377

...

CVE-2017-4377

CVE-2017-4377 is rejected and not an active vulnerability entry.

CVE-2012-4377

Cross-site scripting XSS vulnerability in MediaWiki before 1.18.5 and 1.19.x before 1.19.2 allows remote attackers to inject arbitrary web script or HTML via a File: link to a nonexistent image...

CVE-2012-4377

CVE-2012-4377 is an XSS vulnerability in MediaWiki prior to 1.18.5 and in 1.19.x prior to 1.19.2. The issue allows remote attackers to inject arbitrary script or HTML via a File: link to a nonexistent image. The connected OpenVAS entries and CVE aggregations corroborate this as a MediaWiki vulner...

CVE-2012-4377

Cross-site scripting XSS vulnerability in MediaWiki before 1.18.5 and 1.19.x before 1.19.2 allows remote attackers to inject arbitrary web script or HTML via a File: link to a nonexistent image...

HPE Sizing Tool for SAP Business Suite Remote Arbitrary Code Execution Vulnerability

HPE Sizing Tool for SAP Business Suite is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

HPE Sizer for Microsoft Skype for Business Server Remote Arbitrary Code Execution Vulnerability

HPE Sizer for Microsoft Skype for Business Server is prone to a remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...