105 matches found
CVE-2022-4655
creationtimestamp| type| source ---|---|--- 2023-01-16 18:30:12+00:00| seen| https://t.me/cibsecurity/56557 2025-04-04 18:36:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10527...
CVE-2022-4655
CVE-2022-4655 — Welcart e-Commerce WordPress plugin (
CVE-2022-4655 Welcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcode
The Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes, which could allow users with a role as low as a contributor to perform a Stored Cross-Site Scripting attack...
RHEL 7 : kpatch-patch (RHSA-2022:4655)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4655 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fixe...
SUSE: Security Advisory (SUSE-SU-2014:0912-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 8 : cyrus-imapd (CESA-2020:4655)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4655 advisory. - cyrus-imapd: privilege escalation in HTTP request CVE-2019-18928 - cyrus-imapd: lmtpd component created mailboxes with administrator privileges if th...
Ubuntu 16.04 LTS / 18.04 LTS : Werkzeug vulnerabilities (USN-4655-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4655-1 advisory. It was discovered that Werkzeug has insufficient debugger PIN randomness. An attacker could use this issue to access sensitive information...
CVE-2020-4655
creationtimestamp| type| source ---|---|--- 2020-11-16 20:37:52+00:00| seen| https://t.me/cibsecurity/16379...
CVE-2020-4655
The CVE affects IBM Sterling B2B Integrator Standard Edition, specifically versions 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. The underlying issue is SQL injection that could let a remote attacker view, add, modify, or delete data in the back-end database. IBM’s security bulletin lists remediation by ...
CVE-2020-4655
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM...
Security Bulletin: IBM MQ and IBM MQ Appliance are vulnerable to a denial of service attack caused by an error within the Data Conversion routine (CVE-2019-4655)
Summary An error was found within the IBM MQ message data conversion processing code that could cause multiple failure data capture FDC records to be generated and prevent the channel handling process amqrmppa from handling requests. Vulnerability Details CVEID: CVE-2019-4655 DESCRIPTION: IBM MQ ...
CVE-2013-4655
Technical details about CVE-2013-4655 are not publicly provided in the supplied documents; no concrete affected products, versions, or exploit information is available. Monitor for updates.
CVE-2013-4655
Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service...
WebKit not_number defineProperties Use-After-Free Exploit
Exploit for multiple platform in category dos / poc This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WebKit notnumber defineProperties UAF', 'Description' = %q This module exploits a UAF...
About the security content of iOS 10.0.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Mac OS X Multiple Vulnerabilities (Security Updates 2016-001 / 2016-005)
The remote host is running a version of Mac OS X 10.10.5 or 10.11.6 that is missing a security update. It is therefore, affected by multiple vulnerabilities in the Kernel component : - An unspecified flaw exists due to improper validation of user-supplied input. An attacker can exploit this, by...
About the security content of Security Update 2016-001 El Capitan and Security Update 2016-005 Yosemite
About the security content of Security Update 2016-001 El Capitan and Security Update 2016-005 Yosemite This document describes the security content of Security Update 2016-001 El Capitan and Security Update 2016-005 Yosemite. About Apple security updates For our customers' protection, Apple...
iOS 9.3.5 emergency release behind the truth:NSO using the iPhone 0day without clicking on a remote compromised iPhone（8 on 2 6 May 1 3:4 1 Update-bug warning-the black bar safety net
! According to the Washington Post reported, many people think that their iPhone is absolutely safe, but the latest research shows that Apple's mobileoperating systemin iOS over the years always the presence of three previously unknown“zero-day exploit”, in fact Apple users are always in danger...