CVE-2023-4654 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2023-4654 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2022-4654 Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.3 - Contributor+ Stored XSS via Shortcode

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2022-4654 Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.3 - Contributor+ Stored XSS via Shortcode

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2022-4654

The CVE-2022-4654 entry concerns the Pricing Tables WordPress Plugin prior to version 3.2.3, where one shortcode attribute is not validated/escaped. This allows Stored XSS from users with a role as low as contributor. The vulnerability’s impact is reflected in published PoCs and advisories, and a...

CVE-2020-4654

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090...

CVE-2020-4654

IBM Sterling File Gateway (IBM Sterling File Gateway 2.2.0.0–5.2.6.5_3; 6.0.0.0–6.0.3.4; 6.1.0.0–6.1.0.1) is affected by CVE-2020-4654 due to improper permission control, allowing an authenticated user to obtain sensitive information. The IBM security bulletin documents this as an access-control ...

Security Bulletin: Access Control Vulnerability Affects the User Interface of IBM Sterling File Gateway (CVE-2020-4654)

Summary IBM Sterling File Gateway has addressed the access control security vulnerability. Vulnerability Details CVEID: CVE-2020-4654 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated user to obtain sensitive information due to improper permission control. CVSS Base score: 3.1...

SUSE: Security Advisory (SUSE-SU-2014:0912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : PEAR vulnerabilities (USN-4654-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4654-1 advisory. It was discovered that PEAR incorrectly sanitized filenames. A remote attacker could possibly use this issue to execute arbitrary...

Ubuntu: Security Advisory (USN-4654-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : python27:2.7 (RHSA-2020:4654)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4654 advisory. Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic...

CVE-2019-4654

creationtimestamp| type| source ---|---|--- 2020-04-15 21:14:12+00:00| seen| https://t.me/cibsecurity/11290...

CVE-2019-4654

IBM QRadar SIEM is affected by CVE-2019-4654 in versions 7.3.0 through 7.3.3 Patch 2, where certificate validation is missing or incorrect, enabling MITM-based spoofing of a trusted entity. The primary affected component is QRadar’s TLS certificate validation mechanism, leading to potential infor...

Security Bulletin: IBM QRadar SIEM is vulnerable to invalid certificate validation (CVE-2019-4654)

Summary IBM QRadar SIEM does not validate, or incorrectly validates, a certificate. Vulnerability Details CVEID: CVE-2019-4654 DESCRIPTION: IBM QRadar does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle MI...

Debian DSA-4654-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2020-6450 Man Yue Mo discovered a use-after-free issue in the WebAudio implementation. - CVE-2020-6451 Man Yue Mo discovered a use-after-free issue in the WebAudio implementation. - CVE-2020-6452 asnine discovered a...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1530)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4654

poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack...

CVE-2010-4654

Poppler before 0.16.3 has malformed commands that may cause stack corruption in the library. Affected component: poppler (pre-0.16.3). Impact per CVSS: HIGH with LOCAL attack vector, user interaction required; confidentiality, integrity, and availability for the affected scope can be compromised....

CVE-2013-4654

CVE-2013-4654 is a symlink traversal vulnerability affecting TP-LINK TL-WDR4300 and TL-1043ND. The CVE entry describes a path traversal flaw enabling unauthorized access with network access and no user interaction, with high to critical impact (Confidentiality, Integrity, Availability). The NVD d...