106 matches found
CVE-2023-4480
CVE-2023-4480 describes an out-of-date dependency in the Fusion File Manager (admin panel) that allows a crafted request to read arbitrary system files and write files to arbitrary locations, constrained by mime-type and file extension validation. The vulnerability affects the Fusion File Manager...
CVE-2023-4480 Arbitrary File Read in Fusion File Manager
Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...
SUSE CVE-2013-4480
Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts...
CVE-2022-4480
The Click to Chat WordPress plugin before 3.18.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privile...
CVE-2022-4480
CVE-2022-4480 concerns the WordPress plugin Click to Chat prior to version 3.18.1. The issue stems from insufficient validation/escaping of shortcode attributes, allowing stored XSS when a low-privilege user (Contributor) interacts with the page, potentially impacting higher-privilege users (admi...
CVE-2022-4480 Click to Chat < 3.18.1 - Contributor+ Stored XSS
The Click to Chat WordPress plugin before 3.18.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privile...
Mageia: Security Advisory (MGASA-2017-0012)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS : OpenStack Keystone vulnerabilities (USN-4480-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4480-1 advisory. It was discovered that OpenStack Keystone incorrectly handled EC2 credentials. An authenticated attacker with a limited scope could possibly create EC2...
Ubuntu: Security Advisory (USN-4480-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4480
creationtimestamp| type| source ---|---|--- 2019-12-03 18:02:24+00:00| seen| https://t.me/cibsecurity/8463 2024-03-05 08:41:38+00:00| seen| https://t.me/ctinow/200002...
CVE-2012-4480
mom creates world-writable pid files in /var/run...
CVE-2012-4480
CVE-2012-4480 affects the mom tool, where it creates world-writable PID files in /var/run. This local issue could let an attacker influence PID handling and terminate other processes, as indicated by CNVD/Fedora advisories and the NVD entry. The vulnerability is tied to local access and uncertain...
CVE-2012-4480
mom creates world-writable pid files in /var/run...
Debian DSA-4480-1 : redis - security update
Multiple vulnerabilities were discovered in the HyperLogLog implementation of Redis, a persistent key-value database, which could result in denial of service or potentially the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
Arbitrary Code Execution
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Arbitrary Code Execution
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
CVE-2017-4480
CVE-2017-4480 is rejected/not used; this candidate does not represent an active vulnerability entry.
SUSE SLES11 Security Update : xen (SUSE-SU-2016:2528-1) (Bunker Buster)
This update for xen fixes several issues. These security issues were fixed : - CVE-2016-7094: Buffer overflow in Xen allowed local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update bsc995792 - CVE-2016-7092: The getpagefroml3e...
[SECURITY] [DLA 571-1] xen security update
Package : xen Version : 4.1.6.lts1-1 CVE ID : CVE-2014-3672 CVE-2016-3158 CVE-2016-3159 CVE-2016-3710 CVE-2016-3712 CVE-2016-3960 CVE-2016-4480 CVE-2016-6258 Debian Bug : Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifi...