CVE-2024-4433

CVE-2024-4433 is a Stored XSS vulnerability in the WordPress plugin Simple Image Popup, affecting versions from unspecified initial release up to 2.4.0. Public documents confirm the issue and the plugin affected, but do not provide attacker vectors, exact root-cause details, or a publicly availab...

WordPress Simple Image Popup Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Image Popup Type Plugin Vulnerable versions = 2.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-4433 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 884d37bdacd5 Credits Cronus Required privilege Administrato...

CVE-2021-4433

creationtimestamp| type| source ---|---|--- 2024-01-18 02:26:26+00:00| seen| https://t.me/ctinow/169551 2024-01-24 23:16:31+00:00| seen| https://t.me/ctinow/173159 2024-02-06 09:11:23+00:00| seen| https://t.me/ctinow/179841...

CVE-2021-4433

Karjasoft Sami HTTP Server 2.0 is affected in the HTTP HEAD Request Handler component. The vulnerability (CVE-2021-4433) arises from manipulation of this handler, leading to remote denial of service. Exploitation has been disclosed publicly. Remediation suggestions from PT Security indicate disab...

CVE-2021-4433 Karjasoft Sami HTTP Server HTTP HEAD Rrequest denial of service

A vulnerability was found in Karjasoft Sami HTTP Server 2.0. It has been classified as problematic. Affected is an unknown function of the component HTTP HEAD Rrequest Handler. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclose...

CVE-2021-4433 Karjasoft Sami HTTP Server HTTP HEAD Rrequest denial of service

A vulnerability was found in Karjasoft Sami HTTP Server 2.0. It has been classified as problematic. Affected is an unknown function of the component HTTP HEAD Rrequest Handler. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclose...

CVE-2023-4433

CVE-2023-4433 is a stored XSS vulnerability in cockpit-hq/cockpit, affecting versions prior to 2.6.4. The issue is in the upload path (bootstrap.php) where lack of MIME sanitization enables arbitrary JavaScript execution in the user’s browser. Public references indicate a patch is available and e...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2022-4433

CVE-2022-4433 is a local, privilege-elevation vulnerability in the Lenovo ThinkPad X13s BIOS, specifically in the LenovoSetupConfigDxe driver. The issue is a buffer over-read that can disclose sensitive information to a local attacker with elevated privileges. Multiple sources confirm the affecte...

CVE-2022-4433

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

Qualcomm Chipsets and Lenovo BIOS Get Security Updates to Fix Multiple Flaws

Qualcomm on Tuesday released patches to address multiple security flaws in its chipsets, some of which could be exploited to cause information disclosure and memory corruption. The five vulnerabilities -- tracked from CVE-2022-40516 through CVE-2022-40520 -- also impact Lenovo ThinkPad X13s...

AlmaLinux 8 : python3 (ALSA-2020:4433)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4433 advisory. - The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the servertitle field. This occurs in...

CentOS 8 : python3 (CESA-2020:4433)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4433 advisory. - python: XSS vulnerability in the documentation XML-RPC server in servertitle field CVE-2019-16935 - python: infinite loop in the tarfile module via...

Oracle Linux 8 : python3 (ELSA-2020-4433)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4433 advisory. - Avoid infinite loop when reading specially crafted TAR files CVE-2019-20907 Resolves: rhbz1856481 - Resolve hash collisions for Pv4Interface and...

CVE-2018-4433

creationtimestamp| type| source ---|---|--- 2020-10-27 23:44:19+00:00| seen| https://t.me/cibsecurity/15663...

CVE-2018-4433

CVE-2018-4433 describes a configuration issue that could allow a malicious application to modify protected parts of the file system. The entry is fixed by Apple in macOS Mojave 10.14.4 and Security Update 2019-002 for High Sierra and Sierra, as well as in watchOS 5, iOS 12, and tvOS 12. Public re...

Ubuntu 18.04 LTS / 20.04 LTS : OpenJDK vulnerabilities (USN-4433-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4433-1 advisory. Johannes Kuhn discovered that OpenJDK incorrectly handled access control contexts. An attacker could possibly use this issue to execute...

Ubuntu: Security Advisory (USN-4433-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4433

CVE-2020-4433 concerns IBM Aspera applications vulnerable to a stack-based buffer overflow caused by improper bounds checking. The vulnerability could allow a remote attacker with knowledge of the system to execute arbitrary code with root privileges or cause the server to crash. The IBM security...