WordPress Stream Plugin < 3.9.2 is vulnerable to Broken Access Control

Software Stream Type Plugin Vulnerable versions 3.9.2 Fixed in 3.9.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4384 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID ad3b89e6bfd1 Credits Krzysztof Zajac Required privilege...

AlmaLinux 8 : bind (ALSA-2021:4384)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4384 advisory. - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND 9 Supported Preview Edition,...

Oracle Linux 8 : bind (ELSA-2021-4384)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4384 advisory. 32:9.11.26-6 - Use random entropy to generate unique TKEY identifiers 1980916 32:9.11.26-5 - Fix possible assertion failure iscrefcountcurrent == 0 in freerbtdb...

RHEL 6 / 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP5 (RHSA-2020:4384)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4384 advisory. This release adds the new Apache HTTP Server 2.4.37 Service Pack 5 packages that are part of the JBoss Core Services offering. This...

About the security content of watchOS 5.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Ubuntu 20.04 LTS : GnuTLS vulnerability (USN-4384-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4384-1 advisory. It was discovered that GnuTLS incorrectly handled session ticket encryption keys. A remote attacker could possibly use this issue to bypass authentication or...

CVE-2020-4384

CVE-2020-4384 affects IBM InfoSphere Information Server (and InfoSphere QualityStage) on versions 11.3, 11.5, and 11.7 with a cross-site scripting (XSS) vulnerability in the Web UI that can allow arbitrary JavaScript execution and potential credential disclosure within a trusted session. IBM’s se...

CVE-2012-4384

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...

CVE-2019-4384

IBM Campaign versions 9.1.2 and 10.1 are affected by a directory traversal vulnerability allowing a remote attacker to view arbitrary files via crafted URLs containing dot-dot sequences (../). Root cause is related to insufficient validation of URL paths, enabling traversal to restricted files. I...

CVE-2018-4384

CVE-2018-4384 is a memory corruption issue described as a kernel heap corruption in video processing that affected iOS versions prior to 12.1 and watchOS 5.1. The description consistently attributes the root cause to memory corruption mitigated by improved input validation. Public references indi...

CVE-2018-4384

creationtimestamp| type| source ---|---|--- 2018-11-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45786 2018-11-06 19:29:10+00:00| seen| https://t.me/VulnerabilityNews/2890...

CVE-2017-4384

...

CVE-2017-4384

CVE-2017-4384 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4384

HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors...

CVE-2016-4384

CVE-2016-4384 applies to HPE LoadRunner and HP Performance Center prior to version 12.50. The vulnerability is a remote denial-of-service caused by improper handling of malformed packets in the mchan.dll component. Several connected sources (NVD entry, Nessus plugins) confirm a remote DoS impact ...

CVE-2015-4384

CVE-2015-4384 describes a cross-site scripting (XSS) vulnerability in the Ubercart Webform Checkout Pane module for Drupal. The issue affects Ubercart Webform Checkout Pane 6.x-3.x up to before 6.x-3.10 and 7.x-3.x up to before 7.x-3.11, arising because the module does not sufficiently sanitize u...

CVE-2015-4384

Cross-site scripting XSS vulnerability in the Ubercart Webform Checkout Pane module 6.x-3.x before 6.x-3.10 and 7.x-3.x before 7.x-3.11 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

Ubercart Webform Checkout Pane - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-087

Ubercart Webform Checkout Pane module allows you to define Webform nodes as checkout/order panes in Ubercart. The module doesn't sufficiently sanitize user supplied text in some pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an...

CVE-2014-4384

CVE-2014-4384 affects iOS App Installation (Apple) and describes a path traversal in the App Installation workflow. A local attacker could retarget code signature validation to a different bundle during installation, allowing the installation of an unverified app. Apple’s advisory notes the issue...

Fedora Update for cups FEDORA-2014-4384

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...