133 matches found
CVE-2022-4484 Super Socializer < 7.13.44 - Contributor+ Stored XSS
The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.44 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
CVE-2022-4484 Super Socializer < 7.13.44 - Contributor+ Stored XSS
The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.44 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
SUSE: Security Advisory (SUSE-SU-2022:4484-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
@mpjovanovich/dotmark (>=0.0.1 <=1.0.2) potentially affected by unknown CVE via markedjs (=0.0.1-security)
markedjs NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on markedjs and may be impacted: - @mpjovanovich/dotmark =0.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4484...
AlmaLinux 8 : expat (ALSA-2020:4484)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4484 advisory. - In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount o...
Mageia: Security Advisory (MGASA-2014-0065)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-4484 affecting package kernel 5.4.51-11
CVE-2009-4484 affecting package kernel 5.4.51-11. An upgraded version of the package is available that resolves this issue...
SUSE: Security Advisory (SUSE-SU-2015:1528-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2015:1476-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 8 : expat (ELSA-2020-4484)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4484 advisory. 2.2.5-4 - add security fixes for CVE-2018-20843, CVE-2019-15903 Tenable has extracted the preceding description block directly from the Oracle Linux...
CVE-2020-4484
creationtimestamp| type| source ---|---|--- 2020-11-06 16:50:52+00:00| seen| https://t.me/cibsecurity/15972...
CVE-2020-4484
IBM UrbanCode Deploy (UCD) versions affected by CVE-2020-4484 are 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0. The vulnerability, described by the IBM security bulletin, arises from GENERIC PROCESS PROPERTIES NOT BEING TREATED AS SECURE when a process is run through a RUN GENERIC PROCESS STEP, enablin...
Ubuntu 18.04 LTS : Linux kernel vulnerability (USN-4484-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4484-1 advisory. It was discovered that the cgroup v2 subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a NULL pointer...
CVE-2019-4484
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164068...
CVE-2019-4484
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164068...
CVE-2019-4484
IBM Emptoris Sourcing (10.1.0–10.1.3), IBM Contract Management (10.1.0–10.1.3), and IBM Emptoris Spend Analysis (10.1.0–10.1.3) expose an information disclosure vulnerability where error messages reveal sensitive data. The issue arises from error handling that can be exploited to obtain confident...
Arbitrary Code Execution
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Arbitrary Code Execution
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...