72 matches found
EUVD-2007-4174
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2016-4657
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
CVE-2022-4657
The Restaurant Menu WordPress plugin before 2.3.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2005-4657
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Linux Distros Unpatched Vulnerability : CVE-2010-4657
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak int...
CVE-2024-4657
creationtimestamp| type| source ---|---|--- 2024-09-25 15:59:48+00:00| seen| https://t.me/cvedetector/6313...
CVE-2024-4657
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software BAP Automation allows Stored XSS. This issue affects BAP Automation: before 30840...
CVE-2024-4657
Talent Software BAP Automation is affected by a Stored XSS due to improper input neutralization during web page generation, impacting versions before 30840. The root cause is improper neutralization of input in web page generation, enabling stored XSS attacks. The PT-Security entry specifies upgr...
CVE-2024-4657 Strored XSS in Talent Software's BAP Automation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software BAP Automation allows Stored XSS. This issue affects BAP Automation: before 30840...
CVE-2024-4657 Strored XSS in Talent Software's BAP Automation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software BAP Automation allows Stored XSS. This issue affects BAP Automation: before 30840...
CGA-4657-WCPG-QMM9
Bulletin has no description...
CGA-4657-H355-3VJ6
Bulletin has no description...
CVE-2013-4657
creationtimestamp| type| source ---|---|--- 2024-02-13 13:31:18+00:00| seen| https://t.me/ctinow/183801...
SUSE CVE-2010-4657
PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output...
SUSE CVE-2016-4657
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
CVE-2022-4657
creationtimestamp| type| source ---|---|--- 2023-02-06 22:23:24+00:00| seen| https://t.me/cibsecurity/57574...
CVE-2022-4657
The Restaurant Menu WordPress plugin (versions before 2.3.6) is vulnerable to Stored XSS via shortcode attributes. The root cause is that certain shortcode attributes are not validated or escaped before being output in the page/post, enabling users with the Contributor role or higher to inject ma...
CVE-2022-4657 Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode
The Restaurant Menu WordPress plugin before 2.3.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin < 2.3.6 is vulnerable to Cross Site Scripting (XSS)
Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions 2.3.6 Fixed in 2.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4657 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSI...
Ansible Code Injection Vulnerability
The safeeval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657...