71 matches found
CVE-2022-4381
The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
CVE-2022-4381 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form
The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
CVE-2022-4381
CVE-2022-4381 affects the WordPress plugin Popup Maker prior to version 1.16.9. The root cause is failure to validate and escape a shortcode attribute, enabling Stored Cross-Site Scripting (XSS) where users with as low as contributor role can inject scripts. This yields potential for stored paylo...
CVE-2022-4381 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form
The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
Ubuntu: Security Advisory (USN-4381-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM i Clustering is affected by CVE-2019-4381
Summary IBM i Clustering is vulnerable to this security vulnerability. IBM i has addressed this vulnerability. This security bulletin has been updated, on June 21, 2019, as an additional IBM i PTF is available for IBM i 7.4. Vulnerability Details CVEID: CVE-2019-4381 DESCRIPTION: IBM i Clustering...
Rocky Linux 8 : GNOME (RLSA-2021:4381)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4381 advisory. - A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted...
Oracle Linux 8 : GNOME (ELSA-2021-4381)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4381 advisory. - CVE-2020-36241, CVE-2021-28650: Do not allow symlink in parents rhbz1928701 gnome-calculator - Backport fix for CVE-2020-24870 from upstream Resolves...
RHEL 8 : GNOME (RHSA-2021:4381)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4381 advisory. GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a later upstream version:...
CVE-2018-4381
CVE-2018-4381 affects Apple tvOS and iOS (tvOS 12.1, iOS 12.1). Root cause: resource exhaustion due to improper input validation when processing a malicious message. Impact: potential denial of service. Remediation: fixed in tvOS/iOS 12.1 releases; update to these versions or later to mitigate. E...
CVE-2020-4381
CVE-2020-4381 affects IBM Spectrum Scale for IBM Elastic Storage Server (ESS) versions 5.3.0–5.3.5. An authenticated user can cause a denial of service during deployment or upgrade if GUI-specific services are enabled. The IBM bulletin notes a fix is available: upgrade ESS to version 5.3.6 via Fi...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Django vulnerabilities (USN-4381-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4381-1 advisory. Dan Palmer discovered that Django incorrectly validated memcached cache keys. A remote attacker could possibly use this issue to...
Ubuntu: Security Advisory (USN-4381-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4381
creationtimestamp| type| source ---|---|--- 2020-02-08 20:33:06+00:00| seen| https://t.me/cibsecurity/9715...
CVE-2012-4381
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...
CVE-2012-4381
CVE-2012-4381 affects MediaWiki prior to 1.18.5 and 1.19.x prior to 1.19.2. The root issue is that passwords are stored in the local database in cleartext, enabling context-dependent attackers to obtain plaintext passwords via brute-force. Additionally, when an external authentication plugin retu...
Debian DSA-4381-1 : libreoffice - security update
Alex Infuehr discovered a directory traversal vulnerability which could result in the execution of Python script code when opening a malformed document. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4381. T...
Debian: Security Advisory (DSA-4381-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...