68 matches found
CVE-2023-4502 Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS
The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisi...
CVE-2018-4502
Rejected reason: This candidate is unused by its CNA...
SUSE CVE-2012-4502
Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service crash via a crafted 1 REQSUBNETSACCESSED or 2 REQCLIENTACCESSES command request to the PKLCommandLength function or crafted 3 RPYSUBNETSACCESSED, 4 RPYCLIENTACCESSES, 5...
CVE-2022-4502
creationtimestamp| type| source ---|---|--- 2022-12-15 07:23:13+00:00| seen| https://t.me/cibsecurity/54593...
CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4502
CVE-2022-4502 affects OpenEMR (openemr/openemr) with a reflected XSS vulnerability in versions before 7.0.0.2. Connected sources detail two specific PoCs in the Messages module: (1) messages.php parameter go/stage handling that echoes unsafely printed input, and (2) save.php returning a JSON resp...
CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : websocket-extensions vulnerability (USN-4502-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4502-1 advisory. It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex...
NewStart CGSL CORE 5.04 / MAIN 5.04 : chrony Multiple Vulnerabilities (NS-SA-2020-0027)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has chrony packages installed that are affected by multiple vulnerabilities: - Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service crash via a crafted 1...
Debian: Security Advisory (DSA-4502-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-4502
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-4502
...
The plant controller has a remote vulnerability and no patch-vulnerability warning-the black bar safety net
Power station use of an industrial control system has not patched the vulnerability, an attacker can remotely exploit it to gain network control. Remedy method? Turning off the function or replace the equipment. Power station use of an industrial control system has not patched the vulnerability, ...
Easily using Vulnerability CVE-2 0 1 6-4 5 0 2 ranged attack power plants-vulnerability warning-the black bar safety net
! Repair hopeless? You can only deactivate the function or replace the device! Recently,without a patch the vulnerability, CVE-2 0 1 6-4 5 0 2 be found use in industrial control systems,has now been found that power plants use industrial control system may be severely affected,contrive evil...
CVE-2016-4502
The CVE-2016-4502 entry affects Environmental Systems Corporation (ESC) 8832 Data Controller versions 3.02 and earlier. The vulnerability allows remote attackers to bypass authentication and perform unauthorized administrative operations by abusing a modified parameter, enabling privilege escalat...
openSUSE: Security Advisory for seamonkey (openSUSE-SU-2015:1681-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for seamonkey (important)
seamonkey was updated to fix 25 security issues. These security issues were fixed: - CVE-2015-4520: Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allowed remote attackers to bypass CORS preflight protection mechanisms by leveraging 1 duplicate cache-key generation or 2 retrieval of...
CVE-2015-4502
CVE-2015-4502 affects Mozilla Firefox where the JS file js/src/proxy/Proxy.cpp mishandles certain receiver arguments, allowing a crafted web site to bypass intended window access restrictions. The description in the initial document states this as a remote‑level issue enabling a restriction bypas...
Ubuntu: Security Advisory (USN-2743-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...