71 matches found
WordPress Active Directory Integration / LDAP Integration Plugin <= 4.1.11 is vulnerable to Broken Access Control
Software Active Directory Integration / LDAP Integration Type Plugin Vulnerable versions = 4.1.11 Fixed in 4.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-4506 Patch priority Low CVSS severity Low 2.2 Developer Claim ownership PSID 98c5dc7e14ed Credits...
CVE-2018-4506
Rejected reason: This candidate is unused by its CNA...
RHEL 8 : Red Hat JBoss Enterprise Application Platform (RHSA-2023:4506)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4506 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...
SUSE CVE-2012-4506
Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. dot dot in a repository name...
SUSE CVE-2015-4506
Buffer overflow in the vp9initcontextbuffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file...
CVE-2022-4506
creationtimestamp| type| source ---|---|--- 2022-12-15 07:23:10+00:00| seen| https://t.me/cibsecurity/54590...
CVE-2022-4506
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4506 Unrestricted Upload of File with Dangerous Type in openemr/openemr
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4506 Unrestricted Upload of File with Dangerous Type in openemr/openemr
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4506
CVE-2022-4506 affects OpenEMR (openemr/openemr) prior to 7.0.0.2. The issue is an unrestricted upload of a file with a dangerous type due to insufficient validation of the uploaded content-type, enabling potentially dangerous files to be stored. Impact is high across confidentiality, integrity, a...
CVE-2022-4506 Unrestricted Upload of File with Dangerous Type in openemr/openemr
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2...
SUSE: Security Advisory (SUSE-SU-2015:1703-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2015:1680-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS : MCabber vulnerability (USN-4506-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4506-1 advisory. It was discovered that MCabber does not properly manage roster pushes. An attacker could possibly use this issue to remotely perform machine-in-the-middle attacks...
Debian DSA-4506-1 : qemu - security update
Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service, the execution of arbitrary code or bypass of ACLs. In addition this update fixes a regression which could cause NBD connections to hang. C Tenable Network Security, Inc. The...
CVE-2017-4506
CVE-2017-4506 entry is rejected/not used; this CVE ID does not represent an active vulnerability.
CVE-2016-4506
Cross-site request forgery CSRF vulnerability on Resource Data Management RDM Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users...
CVE-2016-4506
The CVE-2016-4506 CSRF vulnerability affects Resource Data Management’s Intuitive 650 TDB Controller before version 2.1.24. A CSRF condition could allow a remote authenticated user to perform actions in the context of the target user, with impact described as high for confidentiality, integrity, ...
Resource Data Management Intuitive 650 TDB Controller Vulnerabilities (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-140-01 Resource Data Management Intuitive 650 TBD Controller Vulnerabilities that was published May 19, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified a privilege escalati...