WordPress Ajax Load More Plugin < 5.6.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Load More Type Plugin Vulnerable versions 5.6.0.3 Fixed in 5.6.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4466 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 33d2d66c78ff Credits Lana Codes Requir...

CVE-2022-4466

creationtimestamp| type| source ---|---|--- 2023-03-13 19:23:22+00:00| seen| https://t.me/cibsecurity/59919...

CVE-2022-4466

CVE-2022-4466 relates to the WordPress Infinite Scroll plugin for WordPress, affecting versions prior to 5.6.0.3. The issue is that the plugin does not validate and escape certain shortcode attributes before rendering them in posts/pages, which can enable stored Cross-Site Scripting (XSS) by user...

Mageia: Security Advisory (MGASA-2013-0354)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : curl vulnerability (USN-4466-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4466-1 advisory. Marc Aldorasi discovered that curl incorrectly handled the libcurl CURLOPTCONNECTONLY option. This could result in data being sent to the...

IBM MQ 8.0.0.x < 8.0.0.15 / 9.1.0.x < 9.1.0.5 LTS / 9.1.x < 9.1.5 CD DoS (CVE-2020-4466)

According to its self-reported version, the IBM MQ server installed on the remote host is 8.0.0.x prior to 8.0.0.15 or 9.1.0.x prior to 9.1.0.5 LTS or 9.1.5 CD and is therefore affected by a denial of service vulnerability. An authenticated, remote attacker can exploit this issue and cause an err...

Security Bulletin: IBM MQ Appliance is vulnerable to a denial of service vulnerability (CVE-2020-4466)

Summary IBM MQ Appliance has resolved a denial of service vulnerability. Vulnerability Details CVEID: CVE-2020-4466 DESCRIPTION: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop could allow a remote authenticated attacker to cause a denial of service due to an error within the Queue processin...

CVE-2020-4466

CVE-2020-4466 affects IBM MQ for HPE NonStop Server, with an error in the queue processing function that can be exploited by a remote authenticated attacker to cause a denial of service. The primary affected NonStop entries cited are version 8.0.4 and 8.1.0. IBM’s bulletin indicates the vulnerabi...

Security Bulletin: IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4466

Summary IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4466 Vulnerability Details CVEID: CVE-2020-4466 DESCRIPTION: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop could allow a remote authenticated attacker could cause a denial of service due to an error within the Queu...

Security Bulletin: Multiple vulnerabilities in Cloud Pak System

Summary There are vulnerabilities in Cloud Pak System previously known as PureApplication System. It applies to Cloud Pak System, Software, and Service. Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2019-4096 DESCRIPTION: IBM Pure Application System uses a...

Debian: Security Advisory (DSA-4466-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4466-1 : firefox-esr - security update

Samuel Gross discovered a type confusion bug in the JavaScript engine of the Mozilla Firefox web browser, which could result in the execution of arbitrary code when browsing a malicious website. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CVE-2016-4466

CVE-2016-4466 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4466

...

CVE-2017-4466

CVE-2017-4466 is rejected and not an active vulnerability entry.

Amazon Linux: Security Advisory (ALAS-2012-139)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple iTunes < 12.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.2. It is, therefore, affected by multiple vulnerabilities in the bundled version of WebKit, including denial of service and arbitrary code execution vulnerabilities. Note that Nessus has not tested for these issues bu...

APPLE-SA-2014-12-2-1 Safari 8.0.1, Safari 7.1.1, and Safari 6.2.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2014-12-3-1 Safari 8.0.1, Safari 7.1.1, and Safari 6.2.1 Safari 8.0.1, Safari 7.1.1, and Safari 6.2.1 is now available and addresses the following: WebKit Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite...

CVE-2014-4466

WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2014-4466

CVE-2014-4466 affects WebKit as used in Apple Safari (versions: Safari on macOS/iOS prior to 6.2.1, 7.x prior to 7.1.1, and 8.x prior to 8.0.1). The vulnerability enables remote code execution or a denial of service via a crafted website, caused by memory corruption in WebKit. The initial documen...