CVE-2022-4445

creationtimestamp| type| source ---|---|--- 2023-02-13 18:35:59+00:00| seen| https://t.me/cibsecurity/58004...

CVE-2022-4445

CVE-2022-4445 affects the FL3R FeelBox WordPress plugin up to version 8.1. The vulnerability is an unauthenticated SQL injection caused by improper sanitisation/escaping of input in an AJAX action, enabling an attacker to manipulate SQL queries via unauthenticated requests. Public documentation l...

CVE-2022-4445 FL3R FeelBox <= 8.1 - Unauthenticated SQLi

The FL3R FeelBox WordPress plugin through 8.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

WordPress FL3R FeelBox Plugin <= 8.1 is vulnerable to SQL Injection

Software FL3R FeelBox Type Plugin Vulnerable versions = 8.1 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-4445 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID 949edd8b1308 Credits cydave Required privilege Unauthenticated Published 20...

CVE-2019-4445

IBM Security Bulletin aggregates CVE-2019-4445 under the IBM Rational CLM/RQM/RTC family. Affected products and versions include Rational CLM 6.0–6.0.6.1, Rational Quality Manager 6.0–6.0.6.1, Rational Team Concert 6.0–6.0.6.1, Rational DOORS Next Generation 6.0–6.0.6.1, Rational Engineering Life...

Security Bulletin: Security vulnerabilities affect multiple IBM Rational products based on IBM Jazz technology

Summary Multiple security vulnerabilities affect components used by the following products that may affect those products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC, Rational Quality Manager...

Oracle Linux 8 : librabbitmq (ELSA-2020-4445)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4445 advisory. 0.9.0-2 - Resolves: 1809992, CVE-2019-18609 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2020-4445

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122...

CVE-2020-4445

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122...

CVE-2020-4445

CVE-2020-4445 affects IBM Jazz Team Server based applications with a cross-site scripting vulnerability in the WEB UI. The issue enables embedding arbitrary JavaScript in the Web UI, potentially leading to credential disclosure within a trusted session. The vulnerability is identified across mult...

Security Bulletin: Multiple vulnerabilities affects IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineeri...

Ubuntu 20.04 LTS : Ghostscript vulnerability (USN-4445-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4445-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted...

Debian DSA-4445-1 : drupal7 - security update

It was discovered that incomplete validation in a Phar processing library embedded in Drupal, a fully-featured content management framework, could result in information disclosure. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2019-007. C...

CVE-2018-4445

CVE-2018-4445 concerns the Apple Safari/WebKit issue where selecting "Clear History and Website Data" did not clear history. Affects iOS prior to 12.1.1 and Safari before 12.0.2; fixed by Apple in iOS 12.1.1/Safari 12.0.2 with enhanced data deletion. Mitigation is upgrading to the patched version...

CVE-2017-4445

CVE-2017-4445 is rejected/not used and does not represent an active vulnerability entry.

CVE-2014-4445

...

CVE-2014-4445

CVE-2014-4445 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2016-4445

The fixlookupid function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function...

Design/Logic Flaw

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...

CVE-2016-4445

CVE-2016-4445 affects setroubleshoot: the fix_lookup_id function in sealert before 3.2.23 allows local users to run arbitrary commands as root by triggering an SELinux denial with a crafted filename, using commands.getstatusoutput. Affected: setroubleshoot prior to 3.2.23. Mitigation: upgrade to ...