109 matches found
CVE-2024-4514
CVE-2024-4514 affects Campcodes Complete Web-Based School Management System 1.0 . The vulnerability is in the file /view/timetable_insert_form.php, where manipulating the grade argument can trigger a cross-site scripting (XSS) vulnerability. The issue is exploitable remotely, and exploits have be...
openSUSE: Security Advisory for strongswan (SUSE-SU-2023:4514-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-4514
The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-4514 Mmm Simple File List <= 2.3 - Contributor+ Stored XSS
The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-4514
CVE-2023-4514 affects the Mmm Simple File List WordPress plugin (versions
WordPress Mmm Simple File List Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)
Software Mmm Simple File List Type Plugin Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4514 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2751f94a869f Credits Erwan LR WPScan Require...
Moxa PT-7728 Series Switch Improper Authorization (CVE-2016-4514)
Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...
SUSE CVE-2012-4514
rendering/renderreplaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted web page, related to "trying to reuse a frame with a null part."...
CVE-2022-4514
CVE-2022-4514 affects Opencaching Deutschland oc-server3. The vulnerability is a cross-site scripting flaw in an unknown function of the file htdocs/lang/de/ocstyle/varset.inc.php, exploitable remotely via the varvalue parameter. The public exploit has been disclosed. A patch named 4bdd6a0e7b7760...
CVE-2022-4514 Opencaching Deutschland oc-server3 varset.inc.php cross site scripting
A vulnerability, which was classified as problematic, was found in Opencaching Deutschland oc-server3. Affected is an unknown function of the file htdocs/lang/de/ocstyle/varset.inc.php. The manipulation of the argument varvalue leads to cross site scripting. It is possible to launch the attack...
SUSE: Security Advisory (SUSE-SU-2014:0140-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:0189-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 8 : openssl (CESA-2020:4514)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4514 advisory. - openssl: Integer overflow in RSAZ modular exponentiation on x8664 CVE-2019-1551 Note that Nessus has not tested for this issue but has instead relied only on...
USN-4514-1: libproxy vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a denial of service. CVEs contained in this USN include: CVE-2020-25219. Affected...
RHEL 8 : openssl (RHSA-2020:4514)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4514 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
Ubuntu: Security Advisory (USN-4514-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KB4550930: Windows 10 April 2020 Security Update
The remote Windows host is missing security update 4550930. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...
CVE-2019-4514
CVE-2019-4514 affects IBM Security Key Lifecycle Manager (SKLM) chassis: vulnerable in versions 2.6–3.0.1 where information can be disclosed to unauthorized users. The disclosed data can be used to mount further attacks on the system, per NVD/IBM entries. The issue is a pure information-disclosur...
Security Bulletin: IBM Security Key Lifecycle Manager is affected by information exposure (CVE-2019-4514)
Summary IBM Security Key Lifecycle Manager discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. Vulnerability Details CVEID: CVE-2019-4514 DESCRIPTION: IBM Tivoli Key Lifecycle Manager discloses sensitive information to...
Debian: Security Advisory (DSA-4514-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...