CVE-2022-4455 sproctor php-calendar index.php cross site scripting

A vulnerability was identified in sproctor php-calendar up to 2.0.13. This impacts an unknown function of the file index.php. Such manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

CVE-2022-4455

The CVE-2022-4455 entry concerns sproctor php-calendar up to 2.0.13, with a vulnerability in index.php that allows manipulation of $_SERVER['PHP_SELF'] to trigger cross-site scripting. The issue is described as exploitable remotely. A patch is available (patch name: a2941109b42201c19733127ced763e...

SUSE: Security Advisory (SUSE-SU-2012:1705-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4455-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : NSS vulnerabilities (USN-4455-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4455-1 advisory. It was discovered that NSS incorrectly handled certain signatures. An attacker could possibly use this issue to expose sensitive...

Huawei EulerOS: Security Advisory for subscription-manager, python-rhsm (EulerOS-SA-2016-1069)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4455

CVE-2011-4455: Multiple XSS vulnerabilities in Tiki Wiki CMS Groupware up to version 7.2 and earlier allow remote attackers to inject arbitrary scripts via the path info to tiki-admin_system.php, tiki-pagehistory.php, tiki-removepage.php, or tiki-rename_page.php. Affected software is Tiki 6/7 ser...

Debian: Security Advisory (DSA-4455-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4455-1 : heimdal - security update

Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. - CVE-2018-16860 Isaac Boukris and Andrew Bartlett discovered that Heimdal was susceptible to man-in-the-middle attacks caused by incomplete checksum validation. Detai...

CVE-2017-4455

CVE-2017-4455 entry is rejected/not used and does not represent an active vulnerability.

CVE-2015-4455

Summary (CVE-2015-4455) : The vulnerability is in the WordPress plugin “Aviary Image Editor Add-on For Gravity Forms” (3.0 beta). An unrestricted file upload flaw exists in includes/upload.php that allows an unauthenticated user to upload a file with an executable extension and then access it at ...

4455.by XSS vulnerability

Vulnerable URL: http://4455.by/search/number/?article=07+11+9+901+299%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2016-4455

CVE-2016-4455 affects the Subscription Manager (subscription-manager) before 1.17.7-1 for Candlepin. The weakness is weak permissions (755) on subscription-manager cache directories, enabling local users to read files and obtain sensitive information. The connected documents corroborate the affec...

CentOS 7 : python-rhsm / subscription-manager (CESA-2016:2592)

An update for subscription-manager, subscription-manager-migration-data, and python-rhsm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

RedHat Update for subscription-manager RHSA-2016:2592-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin

Title: Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-06-07 Download Site: https://wordpress.org/plugins/aviary-image-editor-add-on-for-gravity-forms Vendor: Waters Edge Web Design and...

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload Title: Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-06-07 Download Site:...

Apple TV < 7.0.2 Multiple Vulnerabilities

Binary data 8939.prm...

APPLE-SA-2014-11-17-1 iOS 8.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...

CVE-2014-4455

dyld in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly handle overlapping segments in Mach-O executable files, which allows local users to bypass intended code-signing restrictions via a crafted file...