CVE-2021-4455

creationtimestamp| type| source ---|---|--- 2025-04-19 08:02:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12578 2025-04-19 08:39:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln5qctb56i24 2025-04-19 09:02:56+00:00| seen|...

CVE-2021-4455

The CVE-2021-4455 entry concerns the WordPress plugin Smart Product Review. It is vulnerable in all versions up to and including 1.0.4 due to missing file type validation, allowing unauthenticated attackers to upload arbitrary files to the affected site and potentially achieve remote code executi...

WordPress Wordpress Plugin Smart Product Review plugin <= 1.0.4 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Keyvan Hardani in WordPress Plugin Smart Product Review versions = 1.0.4...

Linux Distros Unpatched Vulnerability : CVE-2012-4455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the 1 LCK..opencryptoki or 2...

Linux Distros Unpatched Vulnerability : CVE-2016-4455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Subscription Manager package aka subscription-manager before 1.17.7-1 for Candlepin uses weak permissions 755 for subscription-manager cache directories,...

RHEL 5 : opencryptoki (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - opencryptoki: insecure handling of files in the /tmp directory CVE-2012-4455 - openCryptoki before 2.4.1,...

RHEL 4 : opencryptoki (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - opencryptoki: insecure handling of files in the /tmp directory CVE-2012-4455 - openCryptoki before 2.4.1,...

CVE-2024-4455 YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting

The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘item’ parameter in versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

CVE-2024-4455

The CVE-2024-4455 entry concerns the WordPress plugin YITH WooCommerce Ajax Search. Affected versions are up to and including 2.4.0, with Stored Cross-Site Scripting via the input parameter (the original description references the item parameter; the nuclei template specifies the queryString para...

WordPress YITH WooCommerce Ajax Search Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)

Software YITH WooCommerce Ajax Search Type Plugin Vulnerable versions = 2.4.0 Fixed in 2.4.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4455 Patch priority High CVSS severity High 7.1 Developer YITH PSID cdafc8b37008 Credits Krzysztof Zając...

CVE-2015-4455

creationtimestamp| type| source ---|---|--- 2024-05-04 08:01:39+00:00| seen| https://t.me/arpsyndicate/4920...

openSUSE: Security Advisory for postgresql13 (SUSE-SU-2023:4455-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4455

creationtimestamp| type| source ---|---|--- 2024-02-23 21:17:16+00:00| seen| https://t.me/ctinow/192170...

SUSE: Security Advisory (SUSE-SU-2023:4455-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-4455

creationtimestamp| type| source ---|---|--- 2023-08-21 14:40:49+00:00| seen| https://t.me/cibsecurity/68878...

CVE-2023-4455 Cross-Site Request Forgery (CSRF) in wallabag/wallabag

Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.6.3...

CVE-2023-4455 Cross-Site Request Forgery (CSRF) in wallabag/wallabag

Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.6.3...

CVE-2023-4455

Cross-Site Request Forgery (CSRF) in wallabag/wallabag prior to 2.6.3. Public sources describe an attacker‑facing flaw in the delete API flow (DeveloperController.php) where CSRF validation is insufficient, enabling arbitrary API key deletion via a crafted GET to /developer/client/delete/{id}. CV...

SUSE CVE-2012-4455

openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the 1 LCK..opencryptoki or 2 LCK..opencryptokistdll file in /var/lock/...

CVE-2022-4455

A vulnerability was identified in sproctor php-calendar up to 2.0.13. This impacts an unknown function of the file index.php. Such manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The name of the patch is...