113 matches found
CVE-2022-4482
The CVE-2022-4482 entry covers the WP Carousel (Carousel, Slider, Gallery) WordPress plugin before version 2.5.3. The vulnerability is a Stored XSS caused by insufficient validation and escaping of shortcode attributes, enabling a low-privilege user (contributor) to inject scripts that could affe...
CVE-2022-4482 Carousel, Slider, Gallery by WP Carousel < 2.5.3 - Contributor+ Stored XSS
The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.5.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be...
SUSE: Security Advisory (SUSE-SU-2022:4482-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox Security Advisory (MFSA2015-85) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
SUSE: Security Advisory (SUSE-SU-2016:2105-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4482
IBM UrbanCode Deploy UCD 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. A user with access to a snapshot could apply unauthorized additional statuses via direct rest calls. IBM X-Force ID: 181856...
CVE-2020-4482
IBM UrbanCode Deploy (UCD) versions affected by CVE-2020-4482 include 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0. A security bypass vulnerability exists where an authenticated user with access to a snapshot can call REST endpoints to apply unauthorized additional statuses, effectively bypassing secur...
Security Bulletin: CVE-2020-4482 ADD SNAPSHOT STATUS REST CALL DOESN'T CHECK THE USER ROLE
Summary ADD SNAPSHOT STATUS REST CALL DOESN'T CHECK THE USER ROLE BEFORE ADDING THE STATUS TO SNAPSHOT Vulnerability Details CVEID: CVE-2020-4482 DESCRIPTION: IBM UrbanCode Deploy UCD could allow an authenticated user to bypass security. A user with access to a snapshot could apply unauthorized...
RHEL 8 : libgcrypt (RHSA-2020:4482)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4482 advisory. The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. The following packages have been upgraded to a...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Ark vulnerability (USN-4482-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4482-1 advisory. Fabian Vogt discovered that Ark incorrectly handled symbolic links in tar archive files. An attacker could use this to construct a malicio...
CVE-2019-4482
IBM Emptoris Spend Analysis versions 10.1.0ā10.1.3 are vulnerable to cross-site scripting (CVE-2019-4482), allowing arbitrary JavaScript in the Web UI and potentially exposing credentials within a trusted session. CVSS v3 base score 5.4 (network attack, low complexity, user interaction required)....
Security Bulletin: Cross-site Scripting Affects IBM Emptoris Spend Analysis (CVE-2019-4482)
Summary Cross-site Scripting affects IBM Emptoris Spend Analysis. Vulnerability Details CVEID: CVE-2019-4482 DESCRIPTION: IBM Emptoris Spend Analysis is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...
Debian DSA-4482-1 : thunderbird - security update
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, spoofing, information disclosure, denial of service or cross-site request forgery. - CVE-2019-11719 and CVE-2019-11729 are only addressed for stretch, i...
Elevation Of Privileges By An Untrusted Search Path Vulnerability
Luci is a web-based high availability administration application. A flaw was found in the way the luci service was initialized. If a system administrator started the luci service from a directory that was writable to by a local user, that user could use this flaw to execute arbitrary code as the...
CVE-2017-4482
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2014-4482
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3515)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3515 advisory. - crypto: algifhash - Only export and import on sockets with data Herbert Xu Orabug: 25417805 CVE-2016-8646 - USB: usbfs: fix potential infoleak in...
Unbreakable Enterprise kernel security update
kernel-uek 3.8.13-118.16.3 - crypto: algifhash - Only export and import on sockets with data Herbert Xu Orabug: 25417805 CVE-2016-8646 - USB: usbfs: fix potential infoleak in devio Kangjie Lu Orabug: 25462760 CVE-2016-4482 - net: fix infoleak in llc Kangjie Lu Orabug: 25462807 CVE-2016-4485 -...