91 matches found
CVE-2022-4459
The CVE-2022-4459 entry concerns the WordPress WP Show Posts plugin, affected versions are
CVE-2022-4459 WP Show Posts < 1.1.4 - Contributor+ Stored XSS
The WP Show Posts WordPress plugin before 1.1.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...
CVE-2022-4459 WP Show Posts < 1.1.4 - Contributor+ Stored XSS
The WP Show Posts WordPress plugin before 1.1.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...
WordPress WP Show Posts Plugin < 1.1.4 is vulnerable to Cross Site Scripting (XSS)
Software WP Show Posts Type Plugin Vulnerable versions 1.1.4 Fixed in 1.1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4459 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID d21b91713c03 Credits Lana Codes Required...
Amazon Linux 2 : kernel, --advisory ALAS2-2022-1798 (ALAS-2022-1798)
The version of kernel installed on the remote host is prior to 4.14.281-212.502. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1798 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when...
Ubuntu 16.04 LTS / 18.04 LTS : Salt vulnerabilities (USN-4459-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4459-1 advisory. It was discovered that Salt allows remote attackers to determine which files exist on the server. An attacker could use that to extract...
Ubuntu: Security Advisory (USN-4459-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: A Security Vulnerability Has Been Identified In IBM Security Secret Server (CVE-2020-4459)
Summary A security vulnerability identified on IBM Security Secret Server has been addressed in the release 10.8. Vulnerability Details CVEID: CVE-2020-4459 DESCRIPTION: IBM Security Verify Access contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own...
CVE-2019-4459
CVE-2019-4459 affects IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (versions 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5). The issue is a cross-site scripting vulnerability that allows embedded JavaScript in the Web UI, potentially leading to credentials disclosure within a truste...
Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition is affected by ASoC vulnerability (CVE-2019-4459)
Summary IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise has addressed the ASoC vulnerability. Vulnerability Details CVEID: CVE-2019-4459 DESCRIPTION: IBM Cloud Orchestrator is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th...
Debian DSA-4459-1 : vlc - security update
Multiple security issues were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file/stream is processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
CVE-2017-4459
This CVE entry is rejected/not used and does not represent an active vulnerability.
Directory traversal
Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in file operations. Was ZDI-CAN-4459...
CVE-2017-10949
Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in file operations. Was ZDI-CAN-4459...
CVE-2017-10949
Dell Storage Manager 2016 R2.1 is affected by a directory traversal vulnerability in the EmWebsiteServlet doGet method, where user-supplied paths are not properly validated before file operations. This can lead to information disclosure and remote, unauthenticated access, with exploit details sta...
CVE-2016-4459
Stack-based buffer overflow in native/modmanager/node.c in modcluster 1.2.9...
CVE-2016-4459
CVE-2016-4459 is a stack-based buffer overflow in mod_cluster 1.2.9, specifically in native/mod_manager/node.c. The root cause is a stack-based overflow, leading to memory corruption that can cause a crash and impact availability (as reflected by CVSS) without affecting confidentiality or integri...
RHEL 7 : JBoss Core Services (RHSA-2017:0194)
An update is now available for JBoss Core Services on RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 6
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.23 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...