CVE-2022-4383 CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi

The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2022-4383

CVE-2022-4383 affects CBX Petition for WordPress plugin versions 1.0.3 and earlier. The vulnerability arises from inadequate sanitization/escaping of a parameter used in an SQL statement within an unauthenticated AJAX action, enabling SQL injection. Several connected sources corroborate a unauthe...

CVE-2022-4383 CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi

The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2020-4383

IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during deployment while configuring some of the network services. IBM X-Force ID: 179165...

CVE-2020-4383

CVE-2020-4383 affects IBM Elastic Storage Server (Spectrum Scale) in ESS 5.3.0–5.3.6. An authenticated user can trigger a denial of service during deployment when configuring certain network services, due to the underlying issue described in the IBM security bulletin. The NVD entry notes a CVSS v...

Ubuntu: Security Advisory (USN-4383-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-4383-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4383-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacke...

CVE-2012-4383

creationtimestamp| type| source ---|---|--- 2020-01-29 18:38:20+00:00| seen| https://t.me/cibsecurity/9480...

CVE-2012-4383

contao prior to 2.11.4 has a sql injection vulnerability...

CVE-2012-4383

CVE-2012-4383 affects Contao core prior to 2.11.4, with an SQL injection vulnerability in contao-2.11.3\system\modules\backend\Ajax.php. The Red Hat/GHSA/osv entries confirm this issue in the Contao core and identify 2.11.4 as the fixed version. The connected documents do not detail exploit metho...

CVE-2019-4383

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165...

CVE-2019-4383

Summary of CVE-2019-4383 : IBM Spectrum Protect Plus versions 10.1.0–10.1.3 are affected. A redirected restore operation when protecting Oracle or MongoDB databases may escalate the privileges of the user performing the restore. The IBM security bulletin notes a fix path in 10.1.4 (Linux) and rel...

Security Bulletin: Privilege escalation and code injection vulnerabilities in IBM Spectrum Protect Plus application protection (CVE-2019-4383, CVE-2019-4357)

Summary IBM Spectrum Protect Plus application protection could allow a local attacker to gain elevated privileges or execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2019-4383 DESCRIPTION: When using Spectrum Protect Plus to protect Oracle or MongoDB databases, a redirected...

CVE-2018-4383

CVE-2018-4383 is a memory corruption issue addressed by Apple in a security update. The description notes affected platforms as iOS, macOS Mojave, tvOS, and watchOS prior to the listed versions, with the fix described as improved state management. Connected Red Hat and Apple security entries corr...

Debian DSA-4383-1 : libvncserver - security update

Pavel Cheremushkin discovered several vulnerabilities in libvncserver, a library to implement VNC server/client functionalities, which might result in the execution of arbitrary code, denial of service or information disclosure. C Tenable Network Security, Inc. The descriptive text and package...

Debian: Security Advisory (DSA-4383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-4383

...

CVE-2017-4383

CVE-2017-4383 is rejected/not used per the description; this entry does not represent an active vulnerability.

CVE-2015-4383

The CVE-2015-4383 issue affects the Drupal Decisions module. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw in Decisions that allows an attacker to cause an authenticated user to remove individual voters via crafted requests (unspecified vectors). Root cause: insufficient CSRF prot...

CVE-2013-4383

CVE-2013-4383 describes a cross-site scripting (XSS) vulnerability in the jQuery Countdown module for Drupal (7.x-1.x). The root cause is insufficient sanitization of settings, allowing a user with the access administration pages permission to inject arbitrary script or HTML into a page via unspe...