49 matches found
CVE-2021-4417
The Forminator – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is affected by a Cross-Site Request Forgery in versions up to 1.13.4, caused by missing/incorrect nonce validation in listen_for_saving_export_schedule(). This can let unauthenticated attackers export form subm...
CVE-2022-4417
creationtimestamp| type| source ---|---|--- 2023-01-03 00:16:57+00:00| seen| https://t.me/cibsecurity/55761...
CVE-2022-4417
CVE-2022-4417 affects the WordPress plugin WP Cerber Security, Anti-spam & Malware Scan older than 9.3.3. The issue is improper access control of the REST API users endpoint when the blog is hosted in a subdirectory, enabling potential user enumeration. The practical impact is limited to informat...
CVE-2022-4417 WP Cerber < 9.3.3 - User Enumeration Bypass via Rest API
The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users...
CVE-2018-4417
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14...
CVE-2018-4417
CVE-2018-4417 is associated with macOS input validation issues in AppleGraphicsControl (and related components) that were addressed by improved input sanitization. Public sources indicate the vulnerability affected macOS versions up to Mojave 10.14, with the CVE also listed in Apple Security Upda...
About the security content of macOS Mojave 10.14
About the security content of macOS Mojave 10.14 This document describes the security content of macOS Mojave 10.14. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
CVE-2016-4417
Off-by-one error in epan/dissectors/packet-gsmabisoml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted packet that triggers a 0xff tag value...
CVE-2016-4417
Wireshark GSM A-bis OML dissector (epan/dissectors/packet-gsm_abis_oml.c) is vulnerable to an off-by-one error that can trigger a buffer over-read, leading to a denial of service (application crash). Affected: Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2. Root cause: off-by-one in parsing...
Debian DSA-3516-1 : wireshark - security update
Multiple vulnerabilities were discovered in the dissectors/parsers for DNP, RSL, LLRP, GSM A-bis OML, ASN 1 BER which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
Debian: Security Advisory (DSA-3516-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Wireshark Multiple Vulnerabilities (Mar 2016) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Oracle BeeHive 2 - 'voice-servlet processEvaluation()' Write File (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet processEvaluation Vulnerability", 'Description' = %q This module exploits a vulnerability found in...
CVE-2010-4417
creationtimestamp| type| source ---|---|--- 2015-12-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38859 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oraclebeehiveevaluation.rb 2025-02-06 03:13:40+00:0...
CVE-2014-4417
CVE-2014-4417 affects Safari on OS X prior to 10.10. A crafted Push Notification from a malicious site triggers an uncaught SafariNotificationAgent exception, causing a denial of service (universal Push Notification outage). The vulnerability is addressed by improved handling of Safari Push Notif...